ci-server-engineer/.claude/skills/authorization/SKILL.md
cliu ef543cde20 Add phase 5 Engineering Module summary, authorization skill, item tests
- Summary of IM 36K10C10 (Engineering Module - I/O Processes), checked
  against dssana.sup, itm.sup and the default datasets
- New skill authorization: users and authorization groups by quick load
- item-engineering: string item limits (1-200, holds length - 1) and the
  integration granule (itm_int_secs), both tested on CI-Eng-Sample
- CI-Eng-Sample: read-only authorization group CIENG_VIEWER
- Closed ISS-001 (uoff/ublk option bits), ISS-010, ISS-019; new ISS-018, ISS-020

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 17:09:45 +10:00

1.5 KiB

name description
authorization CI Server R1.03 users, authorization groups, login and schemes. Use when the user wants to create, list or remove CI Server users or authorization groups, choose authorization actions (ITEM_READ, ITEM_MODIFY_VALUE, …), set process areas, logoff timeout or initial display for a user, change how users log in (dssana.sup login method: Automatic, Manual CI Server, Manual OS, No, SSO, Deny), or hide Engineering Module features with a scheme. Sources IM 36K10C10-01EN §2; Active Directory and single sign-on follow in phase 13 (IM 36K10J40).

Authorization (R1.03)

Background: knowledge/manuals/IM36K10C10-01EN.md §2 (login methods, actions, user tabs, schemes). Login settings are in dssana.sup on CI Core (skill portal-setup for reading and changing setup files).

Rules:

  • Run the system-check skill first; follow the user's chosen way of working.
  • Users are login accounts. Claude prepares user quick load files but the user loads them and sets any password; never put real passwords in repo files.
  • Remove users before the authorization group they belong to.
Task File Status
Create, check and remove authorization groups and users (quick load) tasks/users-groups.md verified
Login methods per client and user interface (dssana.sup, tab Login control) C10 summary §2 from docs (installed values read)
Schemes (hide Engineering Module features) C10 summary §2 from docs
Active Directory, single sign-on, password rules phase 13 not covered