Security Tab
In a multi-user environment, administrators may want to allow or deny certain privileges for manipulating data. The Security Tab gives the ability to allow or deny access to specific operations. The administrator of the server will have the ability to create roles, change the rights of a role and assign that role to a computer.
Roles
There are three built-in roles:
- Everyone: This built-in role can not be assigned to a computer and the rights apply to everyone that is not specifically assigned to a role. By default all rights are set to Deny which means that this is a read-only role for clients however rights can be changed in this role.
- Administrator: This built-in role has full rights, can be assigned to any computer and is automatically assigned to the computer running the server locally. No rights on this role can be changed.
- User: This built-in role has only one right enabled by default which is to allow editing but not creating or removing. Rights in this role can be changed.
To create a new role, click the + icon in the header and enter a name for the role in the popup dialog box. Roles with duplicate names are not allowed.
To change a role’s rights, press the pop-out context menu button at the end of the text box.
Rights
There are three rights you can assign to a role:
- Create: Allow or deny the creation of groups and materials.
- Remove: Allow or deny the removal of groups and materials.
- Edit: Allow or deny editing of group names and material properties.
Computers
This shows a list of computers that roles can be assigned to. If you do not see any computers, press the refresh button next to the add button. Refreshing may take some time.
Permissions
This is a table of computers assigned to a role.
Once assigned the role can be changed again by clicking on the role in the role column or by right clicking to show a context menu.
Multiple selection also works when using the context menu to assign multiple computers to a different role.
Assigning Roles to Users
There are multiple ways to assign a role to a computer. They are all performed with drag and drop operations:
- Drag a role and drop onto a computer or multiple computers selected.
- Drag a computer or multiple computers selected and drop onto a role.
- Drag a role to the Permissions table with one or more computers selected.
- Drag one or more computers to the Permissions table and by default all will be assigned to the User role.