Question: Roles for functional accounts

[linupi]

Is there somewhere a list of known roles for functional accounts and their respective permissions? E.g. I see admin and ingestor as role in

https://github.com/SciCatProject/backend/blob/017c01dbb3870efa9779b62d3d024318e636d5d9/server/functionalAccounts_example.json#L5

I was wondering 1) where these roles are defined and 2) if it is possible to define new (global) roles (e.g. one that has read-only access to all datasets).

[stephan271]

Sorry, documentation is definitely missing here. The main roles that we are using are ingestor and archiveManager (plus the beamline accounts). The ingestor has read access to all data (and can add new datasets). Adding a new global role requires to adjust the ACLs in the model definitions correspondingly.