User type permissions on the WorldServer 11.2 user interface

Starting with WorldServer 11.1, administrators have a wider variety of permissions to choose from when creating user types. These permissions apply to the calls made to the REST API, as well as to the access users have to the new sections of the user interface (the Home page, the Projects page, and the slide-out navigation pane – all introduced in WorldServer 11.x).

The REST API is organized according to resources. In the following table, each resource has one or more corresponding endpoints. In the Available actions column, you can find information about the types of calls users can make on each endpoint, whereas, in the Required permissions and description column, you can find the exact permissions they need to have in order to perform those actions. You can assign permissions when creating or modifying user types (in Management > User Setup > User Types).

ResourceEndpointAvailable actionsRequired permissions and description
Attribute definitions/attributeDefinitionsREADNo permissions required.
Attribute values/attributeValuesREAD and WRITE:
  1. Project attributes
  2. Task attributes
  3. Other resource attributes
To allow users to perform these actions, select the following check boxes:
  1. Assignments Tab > Projects > "Change Attributes" button – this will allow the users to view and modify project attributes.
  2. Assignments Tab > Tasks > "Change Attributes" button – this will allow the users to view and modify task attributes.
  3. Rest API & New UI > Can read all attributes – this will allow users to view all the attributes of all the resources.
Clients/clientsREADTo allow the users of a certain type to see all the clients configured in the system, select the Rest API & New UI > Clients > Can read clients the user is not a member of check boxes. Otherwise, they will be able to see only the clients to which they belong.
Configuration properties/configREADNo permissions required.
Cost models/costModelsREADTo allow the users of a certain type to see all the cost models configured in the system, select the Rest API & New UI > Cost Model > Can read all Cost Models check boxes. Otherwise, they will be able to see only the cost models available to them based on Access Control permissions (Management > Linguistic Tool Setup > Cost Model Setup > Cost Models > Access Control tab).
Customizations/customizationsREAD, WRITE, and DELETETo allow users to view, modify, and delete customizations, select the Can manage WS 11 customizations check box.
Files/filesUPLOAD and DOWNLOADUPLOAD – to allow the users of a certain type to upload files, select at least one of the following sequences of check boxes:
  • Assignments Tab > Tasks > "Create New Project" button
  • TransPort > Can view projects > Can create projects
  • Assignments Tab > Tasks > "Import" button

DOWNLOAD – this means that users will have access to any file related to the resources to which they have access. To allow users to download files, select the REST API & New UI > Files > Can download files check boxes.

System information/infoREADTo allow the users of a certain type to see system information, select the Rest API & New UI > System Information > Can read System Information check boxes.
Background jobs/jobsREADTo allow the users of a certain type to see all the background jobs configured in the system, select the Assignments Tab > Background Jobs > Can view all background jobs check boxes. Otherwise, they will be able to see only the background jobs that they created.
Linguistic filters/linguisticFiltersREADTo allow the users of a certain type to see all the linguistic filters configured in the system, select the Rest API & New UI > Linguistic filters > Can read linguistic filters owned by other users check boxes. Otherwise, they will see only the linguistic filters that they own.
Locales/localesREADUsers can see only the locales assigned to them.
Login/loginREADNo permissions required.
Logout/logoutREADNo permissions required.
Project attributes/projectAttributesREADThe same as for attributes.
Project groups

/projectGroups

/projectGroups/{id}

/projectGroups/{id}/statistics

/projectGroups/search

READTo allow the users of a certain type to make calls to these endpoints, select any of the check boxes under Assignments Tab > Projects > View drop-down menu.

/projectGroups/{id}/scoping

READTo allow the users of a certain type to make calls to this endpoint, select the Assignments Tab > Projects > Can view scoping information > Can view scoping information for other vendors check boxes.

/projectGroups/{id}/scoping/download

DOWNLOADTo allow the users of a certain type to make calls to this endpoint, select the Assignments Tab > Projects > Can view scoping information > Can view scoping information for other vendors check boxes.
/projectGroups/createCREATETo allow the users of a certain type to create project groups, select at least one of the following sequences of check boxes:
  • TransPort > Can view projects > Can create projects
  • Assignments Tab > Tasks > "Create New Project" button
Project types/projectTypes and /projectTypes/{id}READNo permissions required.
Projects/projectsREAD and WRITEREAD:

To allow the users of a certain type to see existing projects, select the appropriate check boxes under Assignments Tab > Projects > View drop-down menu.

WRITE:
To allow the users of a certain type to create projects, select at least one of the following sequences of check boxes:
  • TransPort > Can view projects > Can create projects
  • Assignments Tab > Tasks > "Create New Project" button

/projects/{id}

/projects/{id}/details

/projects/{id}/statistics

/projects/statistics

READTo allow the users of a certain type to make calls to these endpoints, select the appropriate boxes under Assignments Tab > Projects > View drop-down menu.

/projects/{id}/scoping

/projects/{id}/scopedAssets

READTo allow the users of a certain type to make calls to these endpoints, select the Assignments Tab > Projects > Can view scoping information > Can view scoping information for other vendors check boxes.

/projects/{id}/scoping/download

DOWNLOADTo allow the users of a certain type to make calls to this endpoint, select the Assignments Tab > Projects > Can view scoping information > Can view scoping information for other vendors check boxes.
/projects/export EXPORTTo allow the users of a certain type to export projects, select the Assignments Tab > Projects > Tasks > "Export" button check boxes. Users can export only the projects they can see.
/projects/redoREDOTo allow the users of a certain type to redo projects, select the Assignments Tab > Projects > Tasks > "Complete" button check boxes.
/projects/completeCOMPLETETo allow the users of a certain type to complete projects, select the Assignments Tab > Projects > Tasks > "Complete" button check boxes.
/projects/cancelCANCELTo allow the users of a certain type to cancel projects, select the Assignments Tab > Projects > "Cancel" button check boxes.
/projects/createForTaskMOVE TASKSTo allow the users of a certain type to move tasks, select the Assignments Tab > Projects > Tasks > "Move Tasks" button check boxes.
Quality models/qualityModelsREADTo allow the users of a certain type to see all the quality models configured in the system, select the Rest API & New UI > Quality Model > Can read all Quality Models check boxes. Otherwise, they will not be able to see any quality models.
Quotes/rfqsREADTo allow the users of a certain type to see all the quotes configured in the system, select the Rest API & New UI > Quotes > Can read quotes not created or requested by me check boxes. Otherwise, they will be able to see only the quotes they have requested or created.
Search filters/searchFiltersREADNo permissions required. Users can view only the search filters they have created.
/searchFilters/{id}READUsers can view only the search filters they have created.
Segments/segments and /segments/{tag}READ and WRITESegments are associated to tasks. If the users of a certain type have the appropriate permissions on a task, they can also modify the segments in a task.
Tasks/tasks and /tasks/{id}READ and WRITEREAD:

To allow the users of a certain type to see existing projects, select the appropriate check boxes under Assignments Tab > Projects > Tasks > View drop-down menu.

WRITE:

To allow the users of a certain type to change task attributes, select the Assignments Tab > Projects > Tasks > "Change Attributes" button check boxes.

/tasks/claimCLAIMTo allow the users of a certain type to claim tasks, select the Assignments Tab > Projects > Tasks > "Claim" button check boxes.
/tasks/unclaimUNCLAIMTo allow the users of a certain type to unclaim tasks, select the Assignments Tab > Projects > Tasks > "Unclaim" button check boxes.
/tasks/includeCost READTo allow the users of a certain type to include costs in tasks, select the Assignments Tab > Projects > Tasks > "Include Cost" button check boxes.
/tasks/excludeCostREADTo allow the users of a certain type to exclude costs from tasks, select the Assignments Tab > Projects > Tasks > "Exclude Cost" button check boxes.
/tasks/completeCOMPLETETo allow the users of a certain type to complete tasks, select the Assignments Tab > Projects > Tasks > "Complete" button check boxes.
/tasks/cancelCANCELTo allow the users of a certain type to cancel tasks, select the Assignments Tab > Projects > Tasks > "Cancel Tasks" button check boxes.
/tasks/redo REDOTo allow the users of a certain type to redo tasks, select the Assignments Tab > Projects > Tasks > "Complete" button check boxes.
/tasks/importIMPORTTo allow the users of a certain type to import tasks, select the Assignments Tab > Projects > Tasks > "Import" button check boxes.
/tasks/exportEXPORTTo allow the users of a certain type to export tasks, select the Assignments Tab > Projects > Tasks > "Export" button check boxes.
/tasks/changeAssigneesCHANGE ASSIGNEESTo allow the users of a certain type to change assignees, select the Assignments Tab > Projects > Tasks > "Change Assignees" button check boxes.
/tasks/move MOVETo allow the users of a certain type to move tasks, select the Assignments Tab > Projects > Tasks > "Move Tasks" button check boxes.
Task history/taskHistory READIf you select any check boxes under Assignments Tab > Tasks > View drop-down menu, the users in that user type will see the history of the tasks corresponding to the selected check boxes.
Term database setup/tds and /tds/{id}READTo allow the users of a certain type to see all the term databases configured in the system, select the Management Tab > Linguistic Tool Setup > Term Database Setup check boxes. Otherwise, they will be able to see only the term databases available to them based on ACL permissions.
Translation memory setup/tms and /tms/{id} READTo allow the users of a certain type to see all the translation memories configured in the system, select the Management Tab > Linguistic Tool Setup > Translation Memory Setup check boxes. Otherwise, they will be able to see only the translation memories available to them based on ACL permissions.
/tms/search READTo allow the users of a certain type to make calls to this endpoint, select the appropriate check boxes under Tools Tab > Translation Memories > Can browse TM.
Users/users and /users/{id}READTo allow the users of a certain type to see all the users configured in the system, select the Rest API & New UI > Users > Can read all users check boxes. Otherwise, they will not be able to see other users apart from themselves.

/users/me/assignments

/users/me/statistics

/users/me/details

/users/me/permissions

/users/me/profilePreferences

READNo permissions required.
Workflows

/workflows

/workflows/{id}

/workflows/{id}/image

READTo allow users of a certain type to see all the workflows configured in the system, select Rest API & New UI > Workflow > Can read all Workflows. Otherwise, they can only see workflows containing the steps they are allowed to see (according to the check boxes selected under Assignments Tab > Projects > Tasks > View drop-down menu).
Workflow roles/workflowRoles and /workflowRoles/{id}READTo allow users of a certain type to see all the workflow roles configured in the system, select the Assignments Tab > Background Jobs > Can view all background jobs check boxes. Otherwise, they will be able to see only the workflow roles assigned to them.
The WorldServer 11.x user interface is also a REST API client and any changes to REST API permissions are reflected directly on the user interface. The permissions related to projects and tasks, however, are more granular. Depending on the permissions you assigned to a certain user type, the users in it may select the following views:
  • On the projects page:
    • projects assigned to me
    • projects for clients I manage
    • projects for clients I am a member of
    • active projects for my locales and workgroups
    • completed and canceled projects for my locales and workgroups
    • all active projects
    • all completed and canceled projects
    • active projects for my vendor
    • completed and canceled projects for my vendor
    • active projects for my locales, workgroups and vendor
  • On the tasks page:
    • active tasks
    • all tasks
    • tasks assigned to me
    • canceled tasks
    • tasks claimed by me
    • completed tasks
    • all tasks with changed assets
    • active tasks with changed assets
    • finished tasks with changed assets
    • tasks pending update
    • tasks on automatic steps
    • tasks on cancel steps
    • tasks on error steps
    • tasks on human steps
    • tasks on parallel review steps
    • tasks on sub-workflow steps
    • tasks with issues
    • overdue tasks
    • unassigned tasks
    • unclaimed tasks

Normally, users can only view projects or tasks corresponding to their locales. However, if they have rights on at least one of the following views, they will be able to view all the projects or tasks configured in the system, regardless of their locale: projects for clients I am a member of, projects for clients I manage, all active projects, all completed and canceled projects, all active projects, active projects for my vendor, completed and canceled projects for my vendor. For more information, see the "User Type Assignments Tab Permissions" topic.

By default, users cannot modify resources corresponding to locales that are not assigned to them. To allow them to modify such resources, you have to grant them the Can change tasks or project for all locales permission by selecting its corresponding check box.