Maintenance

The following Maintenance objects control access to various system resources:

• Info: Read access is needed to access the System → Information → System Information menu and its links, and the Dashboard.

  Read access to Maintenance/Info/TestNetwork is needed to access the System → Information → Test Network and Servers page. (Alternatively, it can also be accessed with profile and Settings/TestFetch read access, since the Test Page Fetches form may use profile settings and the page is also reachable via Tools → Test Fetch. However this will not grant access to the Test Network form.)

• Kill: Write access is needed to kill processes.

• Updates: Write access is needed to install or update the software, or to apply a license via the GUI.

• Logs: Read access is needed to read logs via the System → Information → Log Viewer menu. Write access is needed to rotate/delete logs manually.

• Settings: Read and/or write access is needed to view and/or modify System → System Setup → System Wide Settings settings. (Additionally, read/write access is needed on the individual settings, via Settings ACEs.)

  A Maintenance/Settings ACE is also needed for certain system settings/actions not on the System Wide Settings page. These include SSL certificates, Backup/Restore Settings, System Replication Target Status, and creating missing replication profiles.

  The exception is Enable or Disable Access Control Lists: these can only and always be performed by the admin user, regardless of ACLs (e.g. for emergency reset). Note: giving a user write perms on Settings, directly or indirectly, can allow them to override anything on the system, e.g. via externally-modified save and restore settings. Also, note that a user with physical access to the machine could overwrite settings, e.g. re-install the software.

  Various objects under Maintenance/Settings, such as Thesaurus, Mounts etc. control other specific system actions.

• System: Read access to System/Raid is needed to view info under the System → System Setup → RAID Array Management menu. Write access is needed to modify RAID settings.