Apologies, The settings for shib-staff on the privilege tree are as follows:
VCL 2.3.2 Image Admin Image Checkout Resources All Images: Available All VM Images: Available VCL 2.5 Image Admin Image Checkout Resources All Images: Available, Administer All VM Images: Available, Administer If I take away Administer for the version 2.5 Resources, I get “You don't have access to manage any images.” I suspect that I need to take away Administer from the Resources, then add additional privileges for “Create/Update Image” I don’t see that option in “Additional Privileges” tab. How can I set the shib-staff users to ONLY create new images, not edit image profiles? -- Al Quiros Enterprise Systems From: Evelio Quiros <[email protected]> Reply-To: "[email protected]" <[email protected]> Date: Thursday, December 6, 2018 at 1:55 PM To: "[email protected]" <[email protected]> Subject: VCL privileges question Hello, We are upgrading VCL from version 2.3.2 to version 2.5. We have shib-staff as a node in the privilege tree to represent faculty. They should have the ability to create new images from existing ones. On the privilege tree for both systems: The shib-staff node has this set for User Groups: · Image Admin · Image Checkout They also have this under Resources: · All images: Available, Administer · All VM images: Available, Administer On the 2.3.2 system, when a user selects “Manage Images”, they get only get “Create / Update an Image” On the 2.5 system, they ALSO get “Edit Image Profiles” So, on the new (2.5) system, those users are able to edit image profiles. We would prefer them to not have that ability, but to only create new images. How can we accomplish that via the privilege tree? -- Al Quiros Enterprise Systems
