operators should be able only to restart jobs and create/modify needles
Currently operators have read/write access to job templates, job groups, medias, etc. via API and since PR#622 via WebUI.
This access level is too broad and operators access should be scaled back to allow regular job and test maintenance - restarting jobs, updating needles - but no test administration.
One question remain: Since API access (using api keys) level follows access level of user, should operators have r/w access to job status? This is needed for workers, so the high level question is should users used to deploy workers has administrator or operator level?
#1 Updated by oholecek about 7 years ago
- Status changed from New to In Progress
#2 Updated by oholecek about 7 years ago
- Status changed from In Progress to Resolved
- % Done changed from 0 to 100