(→Authorization) (Markierung: 2017-Quelltext-Bearbeitung) |
(→Authorization) (Markierung: 2017-Quelltext-Bearbeitung) |
| Zeile 784: | Zeile 784: | ||
==Authorization== | ==Authorization== | ||
| − | |||
| − | The access to certain resources provied by the application, e.g. facilities, actions, elements of the user interface, can be limited or unlimited. The access is unlimited if the user is a superuser. Any superuser can set or unset the property '''Superuser''' for any other user. The access for | + | The access to certain resources provied by the application, e.g. facilities, actions, elements of the user interface, can be limited or unlimited. The access is unlimited if the user is a superuser. Any superuser can set or unset the property '''Superuser''' for any other user. The access for non-superuser users can be limited through his groups ('''group-level authorization''') and/or locations ('''location-level authorization'''). |
===Group-Level Authorization=== | ===Group-Level Authorization=== | ||
| − | + | The group-lelel authorization is implemented through group permissions, which a set of rules specifing access to different resources: | |
| − | + | [[Datei:FMCU-Server-Groups-Permissions.png] | |
| + | |||
| + | Each user belongs one or more groups. For each group the following categories of resources can be allowed or denied | ||
{| class="wikitable" | {| class="wikitable" | ||