Sandbox Security and Permissions

Each sandbox has its owner which is set during sandbox creation. This user has unlimited privileges to this sandbox as well as administrators. Another users may have access according to sandbox settings.

Sandbox Permissions in CloverETL Server Web GUI

Figure 3.3. Sandbox Permissions in CloverETL Server Web GUI


Permissions to sandbox are modifiable in Permissions tab in sandbox detail. In this tab, selected user groups may be allowed to perform particular operations.

There are 3 types of operations:

Table 3.2. Sandbox permissions

R - readUsers can see this sandbox in their sandboxes list.
W - writeUsers can modify files in the sandbox through CS APIs.
X - executionUsers can execute graphs in this sandbox. Note: graph executed by "graph event listener" is actually executed by the same user as graph which is source of event. See details in "graph event listener". Graph executed by schedule trigger is actually executed by the schedule owner. See details in Chapter 5, Scheduling.