Restricted and read-only user

[jmfaerman]

I am working on a RHQ installation for a data center who would like to offer restricted RHQ acess to their customers.

Is it possible to have a "read-only" user who can see nothing but the resources he owns? They should be albe to monitor their services, but not view other people's resources nor add any content.

[ips]

Yes, this is possible as follows:

1) create a group containing only the resources you want the user to be able to access

2) create the user

3) create a role "read-only role"

  - assign the group you created in step 1) to the group

  - assign the user you created in step 2) to the role

  - do not add any permissions to the role, beyond the implicit resource-read permissions, which are automatically assigned

For more info on the RHQ security model see:

http://rhq-project.org/display/JOPR2/Security+Model

[jmfaerman]

Thanks a lot Ian, that is exactly what i was looking for.