Access Control

The Access Control message specifies the required access level and licenses for protocol entities. Protocol entities are usually gRPC services but can also be more fine grained on gRPC method and Protobuf field level.

Table 1. Available fields in blickfeld.base.AccessControl
Field Type Default Unit

level

Level

-

-

Minimum access level required for entity

read_only

bool

-

-

True if the entity can be accessed with read-only permissions

Level

Available access levels

The levels are ordered in ascending order, which means that each level also inherits the permissions of the levels above it.

Table 2. Available values for blickfeld.base.AccessControl.Level enum
Name Value Description

LEVEL_UNSPECIFIED

0

Access level is not specified

LEVEL_PUBLIC

1

Everyone can access

The corresponding entities can be accessed by anyone who has access to the interface of the device. The access can not be disabled by the user.

LEVEL_AUTHORIZED

2

Only authorized clients can access

The corresponding entities can only be used by authorized clients. The access can be managed by clients with the ADMIN access level. If desired, the AUTHORIZED access level can be configured to act equally to the PUBLIC access level.

LEVEL_ADMIN

3

Only administrative clients can access

The corresponding entities are mainly used to configure the accounts with AUTHORIZED & ADMIN access levels.

LEVEL_SUPPORT

4

Only clients of the Blickfeld support can access

The corresponding entities can only be accessed by Blickfeld Support Tools & clients. The access tokens are bound to devices.

LEVEL_PRODUCTION

5

Only clients in production can access

The corresponding entities are used for end-of-line & re-work processes.

LEVEL_DEVELOPER

6

Only Blickfeld developers can access