Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
60 commits
Select commit Hold shift + click to select a range
cb42375
include main content of old operators manual
rkweehinzmann Apr 8, 2025
fcd7946
link to to-be-reference of DESY's XWiki
rkweehinzmann Apr 8, 2025
8ed9eb2
Merge branch 'main' of github.com:rkweehinzmann/user-documentation
rkweehinzmann Apr 8, 2025
ae0b421
add on publishedData endpoints
rkweehinzmann Apr 22, 2025
7c7eec7
add on current development
rkweehinzmann Apr 22, 2025
5cadc13
add new implementation workflow of publishing datasets
rkweehinzmann Apr 29, 2025
131a9e6
add these too
rkweehinzmann Apr 29, 2025
5abd30a
iron text
rkweehinzmann May 20, 2025
c74118b
add authorization info from developers documentation
rkweehinzmann May 20, 2025
57cebd8
fix text and centering of image
rkweehinzmann Jun 5, 2025
dcd772e
cosmetics
rkweehinzmann Jun 5, 2025
a5f4e32
cosmetics
rkweehinzmann Jun 5, 2025
fc15e73
new internal structure for proposals
rkweehinzmann Jun 5, 2025
66d6e3f
remove DESY from sidebar
rkweehinzmann Jun 5, 2025
f712e84
minor changes
rkweehinzmann Jun 6, 2025
f853365
remove duplicated DOIs intro
rkweehinzmann Jun 17, 2025
264d00a
restructure
rkweehinzmann Jun 17, 2025
754c002
fix subsystem paths
rkweehinzmann Jun 20, 2025
2f4e3cd
fix subsystem paths
rkweehinzmann Jun 20, 2025
1d55fda
update dashboard parts
rkweehinzmann Jun 20, 2025
220a7e1
Merge pull request #3 from rkweehinzmann/main
rkweehinzmann Jun 20, 2025
b610f34
include review in publish data workflow + fix typo on entry page
rkweehinzmann Jun 27, 2025
d7c58fc
fix broken links, refine text for user-guide
rkweehinzmann Jul 2, 2025
4e8cbad
add and update section how to query a ds
rkweehinzmann Jul 2, 2025
5657068
changes for user manual dataset query
rkweehinzmann Jul 2, 2025
0315aa5
update part
rkweehinzmann Jul 2, 2025
a5f6088
use consistently guide instead of manual
rkweehinzmann Jul 2, 2025
e4090fd
add section of new column options
rkweehinzmann Jul 2, 2025
93471c1
highlight open source projec
rkweehinzmann Jul 4, 2025
e9ee4f8
got permission to show samples details as on sampleDetails.png
rkweehinzmann Jul 4, 2025
cb28fb5
start including jobs for users
rkweehinzmann Jul 4, 2025
3c710c3
include jobs links and cosmetics
rkweehinzmann Jul 9, 2025
96cc550
fix typos
rkweehinzmann Jul 10, 2025
11253b3
unlink subsections of authorization model, but keep as placeholder fo…
rkweehinzmann Jul 10, 2025
4de71e0
OK to use as is
rkweehinzmann Jul 10, 2025
16aaf05
add recent status of proposals, replace png with one which shows a us…
rkweehinzmann Jul 10, 2025
3fad65d
fix typo
rkweehinzmann Jul 14, 2025
49b29e8
re-order dataset details, adjust text
rkweehinzmann Jul 16, 2025
2af40dd
highlight open source character
rkweehinzmann Jul 16, 2025
089699d
move text about datasetTypes to better place
rkweehinzmann Jul 16, 2025
40517dc
resolve Lauras comments
rkweehinzmann Jul 22, 2025
9411603
address remaining comments
rkweehinzmann Jul 22, 2025
19e5464
address further comments (incl licence)
rkweehinzmann Jul 22, 2025
6cb3eb1
include more changes
rkweehinzmann Jul 29, 2025
a9843aa
Update jobs.md
LAShemilt Jul 30, 2025
0d07422
Merge pull request #5 from rkweehinzmann/main
LAShemilt Sep 4, 2025
31c739a
Use main, tree is discontinued
minottic Sep 19, 2025
ca2606b
Merge pull request #9 from SciCatProject/use_main_docs
LAShemilt Sep 19, 2025
3006859
replacing original workflow with the one that accesses the docs template
LAShemilt Oct 7, 2025
f3c1b1e
adding a new mkdocs.yml that inherits from mkdoccs-default.yml
LAShemilt Oct 7, 2025
9f21574
Merge pull request #11 from SciCatProject/new-ci-pipeline
LAShemilt Oct 13, 2025
e378067
add more on jobs
rkweehinzmann Oct 21, 2025
2fb9b99
add template for frontend configuration documentation
rkweehinzmann Oct 21, 2025
d0c1d6f
Merge branch 'SciCatProject:main' into main
rkweehinzmann Oct 21, 2025
93c7b60
adding again frontend template
rkweehinzmann Oct 21, 2025
b4770ef
Merge branch 'main' of github.com:rkweehinzmann/user-documentation
rkweehinzmann Oct 21, 2025
aa939ca
minor change
rkweehinzmann Nov 11, 2025
4ca995b
add Dataset ingestion linking from original documentation
rkweehinzmann Nov 11, 2025
ee73611
include Jay's documentation
rkweehinzmann Nov 11, 2025
1391b3b
Merge pull request #12 from rkweehinzmann/main
LAShemilt Mar 10, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 12 additions & 20 deletions .github/mkdocs/mkdocs.yaml
Original file line number Diff line number Diff line change
@@ -1,42 +1,34 @@
INHERIT: mkdocs-default.yml
site_name: SciCat Documentation
docs_dir: ../../docs


nav:
- Home: index.md
- SciCat User Guide:
- user-manual/index.md
- user-guide/index.md
- Login:
- login/index.md
- Anonymous: login/Anonymous.md
- Dashboard: login/Dashboard.md
- Datasets:
- datasets/index.md
- Register DOIs: datasets/Publishing.md
- Proposals: proposals.md
- Samples: samples.md
- Instruments: instruments.md
- Publishing data: datasets/Publishing.md
- Publishing data Advanced: datasets/PublishingAdvanced.md
- Data Retrieval: datasets/jobs.md
- Proposals:
- proposals/index.md
- Samples: samples/index.md
- Instruments: instruments/index.md
- Troubleshooting:
- troubleshoot/index.md

- SciCat Operator Guide:
- operator-manual/index.md
- sites/DESY/index.md
- operator-guide/index.md
- swagger/index.md
- backendconfig/index.md
- backendconfig/authorization/index.md
- backendconfig/dois.md
- frontendconfig/index.md


- About:
- about/index.md

theme: material

plugins:
- search
- glightbox
- section-index


extra_css:
- custom.css
Original file line number Diff line number Diff line change
Expand Up @@ -6,11 +6,12 @@ on: # yamllint disable-line rule:truthy
- main
tags:
- v*

jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: SciCatProject/scicatlive/.github/actions/mkdocs-pages@tree
- uses: SciCatProject/docs-template/.github/actions/mkdocs-pages@main
with:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
push: true
69 changes: 69 additions & 0 deletions docs/backendconfig/authorization/authorization.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,69 @@
# Authorization
### Permission settings or who can do what?

SciCat backend v4.x relies on [CASL](https://casl.js.or) to manage permissions.
The default vanilla installation of the backend is configured with the permissions described and linked below.
To avoid confusion and clarify the terminology used below, the term _User_ indicates a normal authenticated user with no elevated permissions, while _Admin_ indicates any user who belongs to a group that it is listed in the environmental variable ADMIN_GROUPS.
By default ADMIN_GROUPS is set to groups: admin, ingestor, archivemanager.
Special case is for deleting items in SciCat. Users with groups listed in DELETE_GROUPS, are allowed to perform delete. Default value is archivemanager.

___IMPORTANT___ In v3.x, permissions were managed through roles. In v4.x, roles are not used, and they are converted to user groups.

In the vanilla installation, the default functional accounts are assigned to groups as follow:
- user: admin
group: admin

- user: ingestor
group: ingestor

- user: archiveManager
group: archivemanager

This allow for the flexibility required by many installations in different facilities with different needs.


## Group Lists available in Vanilla Configuration
The permissions in the vanilla installation provides a set of user groups which acquires specific set of permissions. In order to assign a set of permissions to a specific group of user, add such group to the correct list indicated below.

| Configuration Group List | Description | CASL ability actions |
| ------------------------ | ----------- | ------------------- |
| _authenticated users_ | Authenticated users can view/access all datasets that belong to one of the groups they belong to | DatasetReadOwn |
| | Users can view attachments for datasets belonging to one of their group | DatasetAttachmentReadOwn |
| | Users are allowed to view origdatablocks for datasets belonging to one of their group | DatasetOrigdatablockReadOwn |
| | Users are allowed to view datablocks for datasets belonging to one of their group | DatasetDatablockReadOwn |
| | Users can view the logbook of the datasets that belong to one of their group | DatasetLogbookReadOwn |
| | |
| CREATE_DATASET_GROUPS | Users of the listed groups can create and modify datasets for any of the groups they belong to. At creation time, the system assignes a pid to the new datasets. If the user assigns one, the system will ignore it. | DatasetCreateOwn , DatasetReadOwn , DatasetUpdateOwn |
| | Users are allowed to perform all operations on attachments for datasets belonging to one of their group | DatasetAttachmentCreateOwn , DatasetAttachmentReadOwn , DatasetAtatchementUpdateOwn , DatasetAttachmentDeleteOwn |
| | Users are allowed to create and update origdatablocks for datasets belonging to one of their group | DatasetOrigdatablockCreateOwn , DatasetOrigdatablockReadOwn , DatasetOrigdatablockUpdateOwn |
| | Users are allowed to create and update datablocks for datasets belonging to one of their group | DatasetDatablockCreateOwn , DatasetDatablockReadOwn , DatasetDatablockUpdateOwn |
| | Users can view the logbook of the datasets that belong to one of their group | DatasetLogbookReadOwn |
| | |
| CREATE_DATASET_WITH_PID_GROUPS | Users of the listed groups can create and modify datasets for any of the groups they belong to. They are allowed to specify the dataset pid. If they decided not to specify a pid, the system will assign one. | DatasetCreateOwn , DatasetReadOwn , DatasetUpdateOwn |
| | Users are allowed to perform all operations on attachments for datasets belonging to one of their group | DatasetAttachmentCreateOwn , DatasetAttachmentReadOwn , DatasetAtatchementUpdateOwn , DatasetAttachmentDeleteOwn |
| | Users are allowed to create and update origdatablocks for datasets belonging to one of their group | DatasetOrigdatablockCreateOwn , DatasetOrigdatablockReadOwn , DatasetOrigdatablockUpdateOwn |
| | Users are allowed to create and update datablocks for datasets belonging to one of their group | DatasetDatablockCreateOwn , DatasetDatablockReadOwn , DatasetDatablockUpdateOwn |
| | Users can view the logbook of the datasets that belong to one of their group | DatasetLogbookReadOwn |
| | |
| CREATE_DATASET_PRIVILEGED_GROUPS | Users of the listed groups can create datasets for any group, but can only modify datasets belong to one of the group they belong to. They are allowed to specify pids for new datasets. This settings are suggested for ingestion functional accounts | DatasetCreateAll , DatasetReadOwn , DatasetUpdateOwn |
| | Users are allowed to perform all operations on attachments for datasets belonging to one of their group | DatasetAttachmentCreateOwn , DatasetAttachmentReadOwn , DatasetAtatchementUpdateOwn , DatasetAttachmentDeleteOwn |
| | Users are allowed to create origdatablocks for any datasets, but can only update them for datasets belonging to one of their group | DatasetOrigdatablockCreateAny , DatasetOrigdatablockReadOwn , DatasetOrigdatablockUpdateOwn |
| | Users are allowed to create and update datablocks for datasets belonging to one of their group | DatasetDatablockCreateOwn , DatasetDatablockReadOwn , DatasetDatablockUpdateOwn |
| | Users can view the logbook of the datasets that belong to one of their group | DatasetLogbookReadOwn |
| | |
| ADMIN_GROUPS | Users of the listed groups can create and modify datasets belonging to any group. They are allowed to specify the dataset's pid at creation time | DatasetCreateAny , DatasetReadAny , DatasetUpdateAny |
| | Users are allowed to perform all operations on attachments for any datasets | DatasetAttachmentCreateAny , DatasetAttachmentReadAny , DatasetAtatchementUpdateAny , DatasetAttachmentDeleteAny |
| | Users are allowed to perform all operations on origdatablocks for any datasets, except delete | DatasetOrigdatablockCreateAny , DatasetOrigdatablockReadAny , DatasetOrigdatablockUpdateAny |
| | Users are allowed to perform all operations on datablocks for any datasets, except delete | DatasetDatablockCreateAny , DatasetDatablockReadAny , DatasetDatablockUpdateAny |
| | Users can view logbook for any datasets| DatasetLogbookReadAny |
| | |
| DELETE_GROUPS | Users whose group is listed here are allowed to delete datasets, origdatablock or datablock | DatasetDeleteAny , DatasetOrigdatablockDeleteAny , DatasetDatablockDeleteAny |

## Subsystems
- [Datasets](./authorization_datasets.md)
- [OrigDatablocks](./authorization_origdatablocks.md)
- [Jobs](./authorization_jobs.md)
- [Users](./authorization_users.md)

___N.B.___: we know that many subsystems are still missing. We are working on reviewing the authorization model for each one of them and producing the relative documentation. We welcome any contribution.

155 changes: 155 additions & 0 deletions docs/backendconfig/authorization/authorization_datasets.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,155 @@
# Datasets Authorization
## CASL ability actions
This is the list of the permissions methods available for datasets and all their endpoints and more fine-grained instance authorization.


### Endpoint authorization
1. DatasetCreate
2. DatasetRead
- DatasetUpdate
- DatasetDelete
- DatasetAttachmentCreate
- DatasetAttachmentRead
- DatasetAttachmentUpdate
- DatasetAttachmentDelete
- DatasetOrigdatablockCreate
- DatasetOrigdatablockRead
- DatasetOrigdatablockUpdate
- DatasetOrigdatablockDelete
- DatasetDatablockCreate
- DatasetDatablockRead
- DatasetDatablockUpdate
- DatasetDatablockDelete
- DatasetLogbookRead
### Instance authorization
1. DatasetCreateOwnerNoPid
2. DatasetCreateOwnerWithPid
- DatasetCreateAny
- DatasetReadManyPublic
- DatasetReadManyAccess
- DatasetReadManyOwner
- DatasetReadOnePublic
- DatasetReadOneAccess
- DatasetReadOneOwner
- DatasetReadAny
- DatasetUpdateOwner
- DatasetUpdateAny
- DetasetDeleteOwner
- DatasetDeleteAny
- DatasetAttachmentCreateOwner
- DatasetAttachmentCreateAny
- DatasetAttachmentReadPublic
- DatasetAttachmentReadAccess
- DatasetAttachmentReadOwner
- DatasetAttachmentReadAny
- DatasetAtatchementUpdateOwner
- DatasetAtatchementUpdateAny
- DatasetAttachmentDeleteOwner
- DatasetAttachmentDeleteAny
- DatasetOrigdatablockCreateOwner
- DatasetOrigdatablockCreateAny
- DatasetOrigdatablockReadPublic
- DatasetOrigdatablockReadAccess
- DatasetOrigdatablockReadOwner
- DatasetOrigdatablockReadAny
- DatasetOrigdatablockUpdateOwner
- DatasetOrigdatablockUpdateAny
- DatasetOrigdatablockDeleteAny
- DatasetDatablockCreateOwner
- DatasetDatablockCreateAny
- DatasetDatablockReadPublic
- DatasetDatablockReadAccess
- DatasetDatablockReadOwner
- DatasetDatablockReadAny
- DatasetDatablockUpdateOwner
- DatasetDatablockUpdateAny
- DatasetDatablockDeleteOwner
- DatasetDatablockDeleteAny
- DatasetLogbookReadOwner
- DatasetLogbookReadAny

### Implementation
How the different level of authorization translates in data condition applied byt he backend.

- **Public**
- `isPublished = true`
- **Access** (condition ar applied in logical _or_)
- `isPublished = true`
- `ownerGroup` is one of the groups that the user belongs
- `accessGroups` are one of the groups that the user belongs
- `sharedWith` contains the user's email
- **Owner**
- `ownerGroup` is one of the groups that the user belongs
- **Any**
- User can perform the action to any dataset


### Priority
```
DatasetCreate-->DatasetCreateOwnerNoPid;
DatasetCreateOwnerNoPid-->DatasetCreateOwnerWithPid;
DatasetCreateOwnerWithPid-->DatasetCreateAny;
```
```
DatasetRead-->DatasetReadManyPublic;
DatasetReadManyPublic-->DatasetReadManyAccess;
DatasetReadManyAccess-->DatasetReadManyOwner;
DatasetReadManyOwner-->DatasetReadAny;
DatasetRead-->DatasetReadOnePublic;
DatasetReadOnePublic-->DatasetReadOneAccess;
DatasetReadOneAccess-->DatasetReadOneOwner;
DatasetReadOneOwner-->DatasetReadAny;
```
```
DatasetUpdate-->DatasetUpdateOwner;
DatasetUpdateOwner-->DatasetUpdateAny;
DatasetDelete-->DatasetDeleteOwner;
DatasetDeleteOwner-->DatasetDeleteAny;
```

### Authorization table
Note, merely for visibility reasons the table has been split. Hierarchically, `OrigDatablocks` and `Datablocks` belong to `Datasets`.
#### Datasets
| HTTP method | Endpoint | Endpoint Authorization | Anonymous | Authenticated User | Create Dataset Groups | Create Dataset with Pid Groups | Create Dataset Privileged Groups | Admin Groups | Delete Groups | Notes |
| -------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- |
| POST | Datasets | _DatasetCreate_ | __no__ | __no__ | Owner, w/o PID<br/>_DatasetCreateOwnerNoPid_ | Owner, w/ PID<br/>_DatasetCreateOwnerWithPid_ | Any<br/>_DatasetCreateAny_ | Any<br/>_DatasetCreateAny_ | __no__ |
| POST | Datasets/isValid | _DatasetCreate_ | __no__ | __no__ | Owner, w/o PID<br/>_DatasetCreateOwnerNoPid_ | Owner, W/ PID<br/>_DatasetCreateOwnerWithPid_ | Any<br/>_DatasetCreateAny_ | Any<br/>_DatasetCreateAny_ | __no__ |
| GET | Datasets | _DatasetRead_ | Public<br/>_DatasetReadPublic_ | Has Access<br/>_DatasetReadAccess_ | Has Access<br/>_DatasetReadAccess_ | Has Access<br/>_DatasetReadAccess_ | Has Access<br/>_DatasetReadAccess_ | Any<br/>_DatasetReadyAny_ | __no__ |
| GET | Datasets/fullquery | _DatasetRead_ | Public<br/>_DatasetReadManyPublic_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Any<br/>_DatasetReadAny_ | __no__ |
| GET | Datasets/fullfacet | _DatasetRead_ | Public<br/>_DatasetReadManyPublic_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Any<br/>_DatasetReadAny_ | __no__ |
| GET | Datasets/metadataKeys | _DatasetRead_ | Public<br/>_DatasetReadManyPublic_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Any<br/>_DatasetReadAny_ | __no__ |
| GET | Datasets/count | _DatasetRead_ | Public<br/>_DatasetReadManyPublic_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Has Access<br/>_DatasetReadManyAccess_ | Any<br/>_DatasetReadAny_ | __no__ |
| GET | Datasets/findOne | _DatasetRead_ | Public<br/>_DatasetReadOnePublic_ | Has Access<br/>_DatasetReadOneAccess_ | Has Access<br/>_DatasetReadOneAccess_ | Has Access<br/>_DatasetReadOneAccess_ | Has Access<br/>_DatasetReadOneAccess_ | Any<br/>_DatasetReadAny_ | __no__ |
| GET | Datasets/_pid_ | _DatasetRead_ | Public<br/>_DatasetReadOnePublic_ | Has Access<br/>_DatasetReadOneAccess_ | Has Access<br/>_DatasetReadOneAccess_ | Has Access<br/>_DatasetReadOneAccess_ | Has Access<br/>_DatasetReadOneAccess_ | Any<br/>_DatasetReadAny_ | __no__ |
| PATCH | Datasets/_pid_ | _DatasetUpdate_ | __no__ | __no__ | Owner<br/>_DatasetUpdateOwner_ | Owner<br/>_DatasetUpdateOwner_ | Owner<br/>_DatasetUpdateOwner_ | Any<br/>_DatasetUpdateAny_ | __no__ |
| PUT | Datasets/_pid_ | _DatasetUpdate_ |__no__ | __no__ | Owner<br/>_DatasetUpdateOwner_ | Owner<br/>_DatasetUpdateOwner_ | Owner<br/>_DatasetUpdateOwner_ | Any<br/>_DatasetUpdateAny_ | __no__ |
| POST | Datasets/_pid_/appendToArrayField | _DatasetUpdate_ |__no__ | __no__ | Owner<br/>_DatasetUpdateOwner_ | Owner<br/>_DatasetUpdateOwner_ | Owner<br/>_DatasetUpdateOwner_ | Any<br/>_DatasetUpdateAny_ | __no__ |
| | | | | | | | | |
| DELETE | Datasets/_pid_ | _DatasetDelete_ | __no__ | __no__ | __no__ | __no__ | __no__ | __no__ | Any<br/>_DatasetDeleteAny_ |
| | | | | | | | | |
| GET | Datasets/_pid_/thumbnail | _DatasetRead_ | Public<br/>_DatasetReadPublic_ | Has Access<br/>_DatasetReadAccess_ | Has Access<br/>_DatasetReadAccess_ | Has Access<br/>_DatasetReadAccess_ | Has Access<br/>_DatasetReadAccess_ | Any<br/>_DatasetReadAny_ | __no__ |
| | | | | | | | | |
| POST | Datasets/_pid_/attachments | _DatasetAttachmentCreate_ | __no__ | __no__ | Owner<br/>_DatasetAttachmentCreateOwner_ | Owner<br/>_DatasetAttachmentCreateOwner_ | Any<br/>_DatasetAttachmentCreateAny_ | Any<br/>_DatasetAttachmentCreateAny_ | __no__ |
| GET | Datasets/_pid_/attachments | _DatasetAttachmemntRead_ | Public<br/>_DatasetAttachmentReadPublic_ | Has Access<br/>_DatasetAttachmentReadAccess_ | Has Access<br/>_DatasetAttachmentReadAccess_ | Has Access<br/>_DatasetAttachmentReadAccess_ | Has Access<br/>_DatasetAttachmentReadAccess_ | Any<br/>_DatasetAttachmentReadAny_ | __no__ |
| PUT | Datasets/_pid_/attachments/_aid_ | _DatasetAttachmemntUpdate_ | __no__ | __no__ | Owner<br/>_DatasetAttachmentUpdateOwner_ | Owner<br/>_DatasetAttachmentUpdateOwner_ | Owner<br/>_DatasetAttachmentUpdateOwner_ | Any<br/>_DatasetAttachmentCreateAny_ | __no__ |
| DELETE | Datasets/_pid_/attachments/_aid_ | _DatasetAttachmemntDelete_ | __no__ | __no__ | Owner<br/>_DatasetAttachmentDeleteOwner_ | Owner<br/>_DatasetAttachmentDeleteOwner_ | Owner<br/>_DatasetAttachmentDeleteOwner_ | Any<br/>_DatasetAttachmentDeleteAny_ | __no__ |

#### OrigDatablock
| HTTP method | Endpoint | Endpoint Authorization | Anonymous | Authenticated User | Create Dataset Groups | Create Dataset with Pid Groups | Create Dataset Privileged Groups | Admin Groups | Delete Groups | Notes |
| -------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- |
| POST | Datasets/_pid_/origdatablocks | _DatasetOrigdatablocksCreate_ | __no__ | __no__ | Owner<br/>_DatasetOrigdatablockCreateOwner_ | Owner<br/>_DatasetOrigdatablockCreateOwner_ | Any<br/>_DatasetOrigdatablockCreateAny_ | Any<br/>_DatasetOrigdatablockCreateAny_ | __no__ |
| POST | Datasets/_pid_/origdatablocks/isValid | _DatasetOrigdatablocksCreate_ | __no__ | __no__ | Owner<br/>_DatasetOrigdatablockCreateOwner_ | Owner<br/>_DatasetOrigdatablockCreateOwner_ | Any<br/>_DatasetOrigdatablockCreateAny_ | Any<br/>_DatasetOrigdatablockCreateAny_ | __no__ |
| GET | Datasets/_pid_/origdatablocks | _DatasetOrigdatablocksRead_ | Public<br/>_DatasetOrigdatablockReadPublic_ | Has Access<br/>_DatasetOrigdatablockReadOAccess_ | Has Access<br/>_DatasetOrigdatablockReadAccess_ | Has Access<br/>_DatasetOrigdatablockReadAccess_ | Has Access<br/>_DatasetOrigdatablockReadAccess_ | Any<br/>_DatasetOrigdatablockReadAny_ | __no__ |
| PATCH | Datasets/_pid_/origdatablocks/_oid_ | _DatasetOrigdatablocksUpdate_ | __no__ | __no__ | Owner<br/>_DatasetOrigdatablockUpdateOwner_ | Owner<br/>_DatasetOrigdatablockUpdateOwner_ | Owner<br/>_DatasetOrigdatablockUpdateOwner_ | Any<br/>_DatasetOrigdatablockCreateAny_ | __no__ | |
| DELETE | Datasets/_pid_/origdatablocks/_oid_ | _DatasetOrigdatablocksDelete_ | __no__ | __no__ | __no__ | __no__ | __no__ | __no__ | Any<br/>_DatasetOrigdatablockDeleteAny_ | |


#### Datablocks
| HTTP method | Endpoint | Endpoint Authorization | Anonymous | Authenticated User | Create Dataset Groups | Create Dataset with Pid Groups | Create Dataset Privileged Groups | Admin Groups | Delete Groups | Notes |
| -------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- | ------- |
| POST | Datasets/_pid_/datablocks | _DatasetDatablocksCreate_ | __no__ | __no__ | Owner<br/>_DatasetDatablockCreateOwner_ | Owner<br/>_DatasetDatablockCreateOwner_ | Owner<br/>_DatasetDatablockCreateOwner_ | Any<br/>_DatasetDatablockCreateAny_ | __no__ | |
| GET | Datasets/_pid_/datablocks | _DatasetOrigdatablocksRead_ | Public<br/>_DatasetDatablockReadPublic_ | Has Access<br/>_DatasetDatablockReadAccess_ | Has Access<br/>_DatasetDatablockReadAccess_ | Has Access<br/>_DatasetDatablockReadAccess_ | Has Access<br/>_DatasetDatablockReadAccess_ | Any<br/>_DatasetDatablockReadAny_ | __no__ | |
| PATCH | Datasets/_pid_/datablocks/_oid_ | _DatasetDatablocksUpdate_ | __no__ | __no__ | Owner<br/>_DatasetDatablockUpdateOwner_ | Owner<br/>_DatasetDatablockUpdateOwner_ | Owner<br/>_DatasetDatablockUpdateOwner_ | Any<br/>_DatasetDatablockCreateAny_ | __no__ | |
| DELETE | Datasets/_pid_/datablocks/_oid_ | _DatasetDatablocksDelete_ | __no__ | __no__ | __no__ | __no__ | __no__ | __no__ | Any<br/>_DatasetDatablockDeleteAny_ |
| | | | | | | | | |
| GET | Datasets/_pid_/logbook | _DatasetLogbookRead_ | __no__ | Owner<br/>_DatasetLogbookReadOwner_ | Owner<br/>_DatasetLogbookReadOwner_ | Owner<br/>_DatasetLogbookReadOwner_ | Owner<br/>_DatasetLogbookReadOwner_ | Any<br/>_DatasetLogbookReadAny_ | __no__ | |
Loading
Loading