Users - Revision history

Lucas Joyal: /* Security settings (from 2.10 and up) */ Adding link to the parameters

2016-11-04T20:53:34Z

Security settings (from 2.10 and up): Adding link to the parameters

2016-11-04T20:47:03Z

Best practices: rewording

2016-11-04T20:44:19Z

Best practices: Using simpler words

2016-11-04T20:42:49Z

Configuration: Remove toolpack in label link

2016-11-04T20:37:47Z

add best practices section

2016-11-03T20:29:40Z

User Groups: Add warning about full authorization to Users

2016-11-03T16:59:27Z

Configuration: Putting the link in a table to separate SBC from Tmedia

2016-11-03T16:01:47Z

2013-06-03T20:22:49Z

change debugging to troubleshooting

2013-06-03T15:43:49Z

Configuration

@@ Line 40: / Line 40: @@
 It contains the following options:
-*Enable password complexity
+*[[Parameter:_Enable_password_complexity | Enable password complexity ]]
-*Session timeout
+*[[Parameter:_Session_Timeout | Session Timeout]]
-−
 == Configuration ==

@@ Line 28: / Line 28: @@
 === Best practices ===
-*Each User needs to be in a User Group. To modify a user's access to a resource, the User Group is modified or a new User Group is created with the appropriate authorization.
+*Each User needs to be in a User Group. To modify a user's access to a resource, modify the User Group it belongs to or create a new User Group with the appropriate authorization.
 *The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.

@@ Line 32: / Line 32: @@
 *The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
-*Be careful when creating a User Group that has full authorization to Users. Access to users can lead to privilege escalation where a user create another user belonging to the Admin user group, thus gaining total access to the web portal.
+*Be careful when creating a User Group that has full authorization to Users. Read/Write Access to users is a security risk because a user can create another user belonging to the Admin user group, thus gaining total access to the web portal.
 == Security settings (from 2.10 and up) ==

@@ Line 54: / Line 54: @@
 *[[Toolpack:Tsbc_System_Settings_A#Access_and_User_Management|v2.10: Access and User Management]]
 | valign="top" |
-*[[Toolpack:System_Settings_C#Access_and_User_Management|Toolpack v2.10: Access and User Management]]
+*[[Toolpack:System_Settings_C#Access_and_User_Management| v2.10: Access and User Management]]
-*[[Toolpack:System_Settings_B#Access_and_User_Management|Toolpack v2.9: Access and User Management]]
+*[[Toolpack:System_Settings_B#Access_and_User_Management| v2.9: Access and User Management]]
-*[[Toolpack:System_Settings_A#Access_and_User_Management|Toolpack v2.8: Access and User Management]]
+*[[Toolpack:System_Settings_A#Access_and_User_Management| v2.8: Access and User Management]]
 |}

@@ Line 27: / Line 27: @@
      No access to the resource. It won't be displayed in the left menu.
-Each User needs to be in a User Group.
+=== Best practices ===
-To modify a user's access to a resource, the User Group is modified or a new User Group is created with the appropriate authorization.
+*Each User needs to be in a User Group. To modify a user's access to a resource, the User Group is modified or a new User Group is created with the appropriate authorization.
-The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
+*The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
-Be careful when creating a User Group that has full authorization to Users. Access to users can lead to privilege escalation where a user create another user belonging to the Admin user group, thus gaining total access to the web portal.
+*Be careful when creating a User Group that has full authorization to Users. Access to users can lead to privilege escalation where a user create another user belonging to the Admin user group, thus gaining total access to the web portal.
 == Security settings (from 2.10 and up) ==

← Older revision		Revision as of 20:29, 3 November 2016
Line 31:		Line 31:

	The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.		The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
		+
		+	Be careful when creating a User Group that has full authorization to Users. Access to users can lead to privilege escalation where a user create another user belonging to the Admin user group, thus gaining total access to the web portal.

	== Security settings (from 2.10 and up) ==		== Security settings (from 2.10 and up) ==

@@ Line 7: / Line 7: @@
 * Mitigating Risks,
 * Improving Security,
-* Speeding up and Simplifying Maintenance and Debugging.
+* Speeding up and simplifying maintenance and troubleshooting.

← Older revision		Revision as of 15:43, 3 June 2013
Line 34:		Line 34:
	== Configuration ==		== Configuration ==

−	To learn how to configure Users and User Groups using the Web Portal, refer the [[Web_Portal_Tutorial_Guide_v2.7#~~User and~~ Access Management\|~~User and~~ Access Management]] section of the Web Portal Tutorial guide.	+	To learn how to configure Users and User Groups using the Web Portal, refer the [[Web_Portal_Tutorial_Guide_v2.7#Access and User Management\|Access and User Management]] section of the Web Portal Tutorial guide.