Users

From TBwiki
(Difference between revisions)
Jump to: navigation, search
(Grammer & added benefits)
(Security settings (from 2.10 and up): Adding link to the parameters)
 
(13 intermediate revisions by 4 users not shown)
Line 1: Line 1:
Users and User Groups are the basis of authentication and authorization forToolpack systems.
+
Users and User Groups are the building blocks of authentication and authorization for Toolpack systems.
  
== Users ==
 
  
Every person using the Toolpack Web Portal should have their own user.
+
The proper implementation of Users and User Groups increases efficiency and reduce costs by:
Users are defined by a username and a password.
+
  
Proper implementation of Users and User Groups increases efficiency and reduce costs by:
 
 
* Reducing Human Error,
 
* Reducing Human Error,
 
* Mitigating Risks,
 
* Mitigating Risks,
 
* Improving Security,
 
* Improving Security,
* Speeding up & Simplifying Maintenance and Debugging.
+
* Speeding up and simplifying maintenance and troubleshooting.
 +
 
 +
 
 +
== Users ==
 +
 
 +
Each person that uses Toolpack Web Portal should be assigned their own user name and password.
  
  
 
== User Groups ==
 
== User Groups ==
  
User Groups define a list of authorized actions applied to each item on the left-hand Toolpack Web Portal menu (resources).
+
User Groups define a list of authorized actions applied to each item in the left-hand navigation menu of the Web Portal.
  
 
There are 3 authorization levels per resource:
 
There are 3 authorization levels per resource:
Line 25: Line 27:
 
     No access to the resource. It won't be displayed in the left menu.
 
     No access to the resource. It won't be displayed in the left menu.
  
Each User needs to be in a User Group.  
+
=== Best practices ===
To modify a User access to a resource, you need to modify its User Group or create a new User Group with the required authorization.  
+
*Each User needs to be in a User Group. To modify a user's access to a resource, modify the User Group it belongs to or create a new User Group with the appropriate authorization.  
 +
 
 +
*The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
 +
 
 +
*Be careful when creating a User Group that has full authorization to Users. Read/Write Access to users is a security risk because a user can create another user belonging to the Admin user group, thus gaining total access to the web portal.
 +
 
 +
== Security settings (from 2.10 and up) ==
 +
 
 +
Security settings regroup all the global settings options available in the Web Portal.
 +
 
 +
It contains the following options:
 +
 
 +
*[[Parameter:_Enable_password_complexity | Enable password complexity ]]
 +
*[[Parameter:_Session_Timeout | Session Timeout]]
 +
 
 +
== Configuration ==
  
The ''Admin'' User Group is not modifiable, and each User in this group gets access to all the resource in the Web Portal.
+
{| cellpadding="5" border="1" class="wikitable"
 +
|-
 +
! width="200" style="background: rgb(239, 239, 239) none repeat scroll 0% 0%; -moz-background-clip: border; -moz-background-origin: padding; -moz-background-inline-policy: continuous;" | Tsbc
 +
! width="200" style="background: rgb(239, 239, 239) none repeat scroll 0% 0%; -moz-background-clip: border; -moz-background-origin: padding; -moz-background-inline-policy: continuous;" | Tmedia/Tsig/Tdev
 +
|-
 +
| valign="top" |
 +
*[[Toolpack:Tsbc_System_Settings_A#Access_and_User_Management|v2.10: Access and User Management]]
 +
| valign="top" |
 +
*[[Toolpack:System_Settings_C#Access_and_User_Management| v2.10: Access and User Management]]
 +
*[[Toolpack:System_Settings_B#Access_and_User_Management| v2.9: Access and User Management]]
 +
*[[Toolpack:System_Settings_A#Access_and_User_Management| v2.8: Access and User Management]]
 +
|}

Latest revision as of 15:53, 4 November 2016

Users and User Groups are the building blocks of authentication and authorization for Toolpack systems.


The proper implementation of Users and User Groups increases efficiency and reduce costs by:

  • Reducing Human Error,
  • Mitigating Risks,
  • Improving Security,
  • Speeding up and simplifying maintenance and troubleshooting.


Contents

Users

Each person that uses Toolpack Web Portal should be assigned their own user name and password.


User Groups

User Groups define a list of authorized actions applied to each item in the left-hand navigation menu of the Web Portal.

There are 3 authorization levels per resource:

 Read/Write
   Full access to the resource.
 Read
   Only view access to the resource. The action commands will be hidden.
 None
   No access to the resource. It won't be displayed in the left menu.

Best practices

  • Each User needs to be in a User Group. To modify a user's access to a resource, modify the User Group it belongs to or create a new User Group with the appropriate authorization.
  • The Admin User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
  • Be careful when creating a User Group that has full authorization to Users. Read/Write Access to users is a security risk because a user can create another user belonging to the Admin user group, thus gaining total access to the web portal.

Security settings (from 2.10 and up)

Security settings regroup all the global settings options available in the Web Portal.

It contains the following options:

Configuration

Tsbc Tmedia/Tsig/Tdev
Personal tools