No edit summary |
No edit summary Tag: 2017 source edit |
||
| (6 intermediate revisions by the same user not shown) | |||
| Line 8: | Line 8: | ||
Depending on the actions that users are allowed to perform, many of these rights are related and must therefore be granted to a specific user type. For example, a user with read access should also be able to change the user profile and add pages to a watch list. For this reason, BlueSpice uses roles and groups to manage the authorisations of individual users.<bs:drawio filename="Rechtesystem" /> | Depending on the actions that users are allowed to perform, many of these rights are related and must therefore be granted to a specific user type. For example, a user with read access should also be able to change the user profile and add pages to a watch list. For this reason, BlueSpice uses roles and groups to manage the authorisations of individual users.<bs:drawio filename="Rechtesystem" /> | ||
The following elements are part of the rights system: | |||
<section begin="training-slides" /> | <section begin="training-slides" /> | ||
{| class="contenttable-blue" style="width:100%;" | {| class="contenttable-blue" style="width:100%;" | ||
|+ | |+ | ||
! style="" |'''Element''' | ! style="" |'''Element''' | ||
! style="width:80 %;" |''' | ! style="width:80 %;" |'''Function''' | ||
|- | |- | ||
| style="" | | | style="" |Right | ||
| style="" | | | style="" |Enables a specific action | ||
|- | |- | ||
| style="" | | | style="" |Role | ||
| style="" | | | style="" |Combination of rights (rights can only be granted via roles) | ||
|- | |- | ||
| style="" | | | style="" |User | ||
| style="" | | | style="" |Entity in the wiki instance database. Has a unique user name and a unique user ID. | ||
|- | |- | ||
| style="" | | | style="" |Group | ||
| style="" | | | style="" |A collection of users. A user is assigned to one or more groups. There are system-internal groups (which cannot be removed or renamed) and custom groups. In the case of custom groups, the group name often consists of the role and a namespace name. | ||
|- | |- | ||
| style="" | | | style="" |Namespace | ||
| style="" | | | style="" |Authorisations can be defined at namespace level. But generally not per page. | ||
|}</div> | |}</div> | ||
== | |||
== Classic rights assignment procedure == | |||
<bs:drawio filename="Verrechtung" /> | <bs:drawio filename="Verrechtung" /> | ||
{| class="contenttable-blue" style="width:100%;" | {| class="contenttable-blue" style="width:100%;" | ||
|+ | |+ | ||
! style="" |''' | ! style="" |'''Step''' | ||
! style="" |''' | ! style="" |'''Function''' | ||
! style="" |''' | ! style="" |'''Description''' | ||
|- | |- | ||
| style="" |'''1''' | | style="" |'''1''' | ||
| style="" | | | style="" |Namespace management | ||
| style="" | | | style="" |Create a namespace via the <code>Special:NamespaceManager</code> page. | ||
|- | |- | ||
| style="" |'''2''' | | style="" |'''2''' | ||
| style="" | | | style="" |Group management | ||
| style="" | | | style="" |Create a user group for each role that you want to manage in this namespace via the <code>Special:PermissionManager</code> page. The group name should follow a specific pattern, e.g. <code><namespace_name>_<role_name></code>. | ||
|- | |- | ||
| style="" |'''3''' | | style="" |'''3''' | ||
| style="" | | | style="" |Rights management | ||
| style="" | | | style="" |Connect groups, roles and namespaces with <code>Special:PermissionManager</code> . Simply follow the name pattern of the group. | ||
|- | |- | ||
| style="" |'''4''' | | style="" |'''4''' | ||
| style="" | | | style="" |User management | ||
| style="" | | | style="" |Assign users to the groups. | ||
|} | |} | ||
<section end="training-rechte-workflow" /> | <section end="training-rechte-workflow" /> | ||
{{Box Links | {{Box Links-en | ||
| | |Topic1=[[Manual:Extension/BlueSpiceNamespaceManager| Namespace management]] | ||
| | |Topic2=[[Manual:Extension/BlueSpicePermissionManager|Permission Management]] | ||
| | |Topic3=[[Manual:Extension/BlueSpiceGroupManager|Group management]] | ||
| | |Topic4=[[Manual:Extension/BlueSpiceUserManager|User management]] | ||
}} | }} | ||
[[de: | [[de:Handbuch:Konzept_Rechteverwaltung]] | ||
[[ | [[en:{{FULLPAGENAME}}]] | ||
[[Category:Berechtigungen]] | [[Category:Berechtigungen]] | ||
Latest revision as of 12:22, 8 April 2025
Concept
More than 100 rights are required to control user access to all wiki functions and extensions.
Depending on the actions that users are allowed to perform, many of these rights are related and must therefore be granted to a specific user type. For example, a user with read access should also be able to change the user profile and add pages to a watch list. For this reason, BlueSpice uses roles and groups to manage the authorisations of individual users.
The following elements are part of the rights system:
| Element | Function |
|---|---|
| Right | Enables a specific action |
| Role | Combination of rights (rights can only be granted via roles) |
| User | Entity in the wiki instance database. Has a unique user name and a unique user ID. |
| Group | A collection of users. A user is assigned to one or more groups. There are system-internal groups (which cannot be removed or renamed) and custom groups. In the case of custom groups, the group name often consists of the role and a namespace name. |
| Namespace | Authorisations can be defined at namespace level. But generally not per page. |
Classic rights assignment procedure
| Step | Function | Description |
|---|---|---|
| 1 | Namespace management | Create a namespace via the Special:NamespaceManager page.
|
| 2 | Group management | Create a user group for each role that you want to manage in this namespace via the Special:PermissionManager page. The group name should follow a specific pattern, e.g. <namespace_name>_<role_name>.
|
| 3 | Rights management | Connect groups, roles and namespaces with Special:PermissionManager . Simply follow the name pattern of the group.
|
| 4 | User management | Assign users to the groups. |
