wms access

Permissions: groups, per-user access, 2FA exemptions, sign-in limits and timeouts

A permission is area.action (e.g. lego.export). Groups allow or deny permissions; a user belongs to groups and can override single permissions. Deny beats allow. A user with no entry keeps their ModernWMS role's access. Run wms access perms for the full list.

wms access

Subcommands

• wms access check — Would this user be allowed? And why
• wms access export — Print the whole policy as JSON (a backup, or to edit and import)
• wms access groups — List, show, create, change and delete groups
• wms access import — Replace the policy with a JSON file (checked before anything is written)
• wms access perms — List every permission
• wms access settings — Global timings: 2FA remember window, idle lock, maximum session, export expiry, download link lifetime
• wms access user — A user's groups, permission overrides, 2FA policy, sign-in limits and timeouts