Users
From TBwiki
(Difference between revisions)
(→Configuration) |
Lucas Joyal (Talk | contribs) (→Security settings (from 2.10 and up): Adding link to the parameters) |
||
| (8 intermediate revisions by 2 users not shown) | |||
| Line 7: | Line 7: | ||
* Mitigating Risks, | * Mitigating Risks, | ||
* Improving Security, | * Improving Security, | ||
| − | * Speeding up and | + | * Speeding up and simplifying maintenance and troubleshooting. |
| Line 27: | Line 27: | ||
No access to the resource. It won't be displayed in the left menu. | No access to the resource. It won't be displayed in the left menu. | ||
| − | Each User needs to be in a User Group. | + | === Best practices === |
| − | To modify a user's access to a resource, the User Group | + | *Each User needs to be in a User Group. To modify a user's access to a resource, modify the User Group it belongs to or create a new User Group with the appropriate authorization. |
| − | The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal. | + | *The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal. |
| + | |||
| + | *Be careful when creating a User Group that has full authorization to Users. Read/Write Access to users is a security risk because a user can create another user belonging to the Admin user group, thus gaining total access to the web portal. | ||
| + | |||
| + | == Security settings (from 2.10 and up) == | ||
| + | |||
| + | Security settings regroup all the global settings options available in the Web Portal. | ||
| + | |||
| + | It contains the following options: | ||
| + | |||
| + | *[[Parameter:_Enable_password_complexity | Enable password complexity ]] | ||
| + | *[[Parameter:_Session_Timeout | Session Timeout]] | ||
== Configuration == | == Configuration == | ||
| − | + | {| cellpadding="5" border="1" class="wikitable" | |
| + | |- | ||
| + | ! width="200" style="background: rgb(239, 239, 239) none repeat scroll 0% 0%; -moz-background-clip: border; -moz-background-origin: padding; -moz-background-inline-policy: continuous;" | Tsbc | ||
| + | ! width="200" style="background: rgb(239, 239, 239) none repeat scroll 0% 0%; -moz-background-clip: border; -moz-background-origin: padding; -moz-background-inline-policy: continuous;" | Tmedia/Tsig/Tdev | ||
| + | |- | ||
| + | | valign="top" | | ||
| + | *[[Toolpack:Tsbc_System_Settings_A#Access_and_User_Management|v2.10: Access and User Management]] | ||
| + | | valign="top" | | ||
| + | *[[Toolpack:System_Settings_C#Access_and_User_Management| v2.10: Access and User Management]] | ||
| + | *[[Toolpack:System_Settings_B#Access_and_User_Management| v2.9: Access and User Management]] | ||
| + | *[[Toolpack:System_Settings_A#Access_and_User_Management| v2.8: Access and User Management]] | ||
| + | |} | ||
Latest revision as of 15:53, 4 November 2016
Users and User Groups are the building blocks of authentication and authorization for Toolpack systems.
The proper implementation of Users and User Groups increases efficiency and reduce costs by:
- Reducing Human Error,
- Mitigating Risks,
- Improving Security,
- Speeding up and simplifying maintenance and troubleshooting.
Contents |
Users
Each person that uses Toolpack Web Portal should be assigned their own user name and password.
User Groups
User Groups define a list of authorized actions applied to each item in the left-hand navigation menu of the Web Portal.
There are 3 authorization levels per resource:
Read/Write Full access to the resource. Read Only view access to the resource. The action commands will be hidden. None No access to the resource. It won't be displayed in the left menu.
Best practices
- Each User needs to be in a User Group. To modify a user's access to a resource, modify the User Group it belongs to or create a new User Group with the appropriate authorization.
- The Admin User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
- Be careful when creating a User Group that has full authorization to Users. Read/Write Access to users is a security risk because a user can create another user belonging to the Admin user group, thus gaining total access to the web portal.
Security settings (from 2.10 and up)
Security settings regroup all the global settings options available in the Web Portal.
It contains the following options:
Configuration
| Tsbc | Tmedia/Tsig/Tdev |
|---|---|
