Advanced permissions

Manage advanced permissions

Permissions on the web site are managed in two ways:

  • Menu permissions
    • This controls which menu items a user can see and is set in the Administration | Interface | Menu system. If a user does not have permission to see a menu, it won't appear so they cannot select that feature from the interface.
  • Advanced permissions
    • This controls if a user is actually allowed to access a particular page (whether or not it appears on the menu). If a user does not have page permissions, they will get an error message when they try to access the page.

These permissions are rather more complex. In this example, we will demonstrate giving permission for pages to manage data in program table. If a user gets an access error message, the permissions can be updated as follows:

New page with no permission

If this is a new interface, then where will be no Operations or Tasks created yet for the page. You have to create these, before you can assign them to a user. If this is an existing page, then the Task should already exist and you can skip this first part.

  1. Find out the root name of the page that we want to access. On the site, go to the page and look at the URL. For example, if the url is then the root name of the page is TrainingCourse. Note that the first letter should be made into a capital but the rest should be unchanged
  2. Got to the interface permissions page: Administration | Permission | Interface Permissions.
  3. Click on Manage Auth Items
  4. Click on Create under Auth Items
  5. Create a task to group several operations together:
    1. Name is RootNameAdministrating where RootName is the root name you found out above
    2. Type is Task
    3. Leave the other fields blank
    4. Click Create
  6. Now create the different operations for that task (not all may be required, depending on what you want people to be able to do)
    1. Click Create again
    2. Name is RootNameIndex, type is Operation, click Create
    3. Name is RootNameCreate, type is Operation, click Create
    4. Name is RootNameDelete, type is Operation, click Create
    5. Name is RootNameUpdate, type is Operation, click Create
    6. Name is RootNameAdmin, type is Operation, click Create
    7. Name is RootNameView, type is Operation, click Create
  7. Now group the four operations under the new task
    1. At the top, click Assign to users
    2. Click on the Tasks tab
    3. Select the new task you created (RootNameAdministrating)
    4. In the third box (on the right) find the four Operations you created and highlight them
    5. Click the << button to move them to the middle box (Assigned operations)
Page that already has a Task created for it

Once you have created the Task and Operations, or if it was already crated:

  1. Now assign the new permissions for that interface to the right user groups
    1. Click on Roles tab at the top
    2. Find the user group on the left that you want to have permission
    3. Find the Task in the third box (on the right (RootNameAdministrating)
    4. Highlight the Task
    5. Click the << button to add it to the group's tasks
  2. Repeat for any other groups that require permissions