Studio security can be configured in three different ways: NTLM, NTLM-custom or Custom. Read Security and user management for detailed information on Studio security configuration. Whether the first two tasks are performed in Studio depends on the chosen Studio configuration.
Managing user groups is always done in the Studio, since the groups are a collection of Studio rights. Rights are available on relevant levels and can be granted or denied at any of these levels.
The table below gives an overview of the available rights per level.
General
Repository
Branch type
Branch
Project
Module type
Module
Login
v
Manage user accounts
v
Manage user access
v
Manage repositories
v
Repository access
v
v
Manage branches
v
v
Manage revision tags
v
v
Branch access
v
v
v
v
Merge changes
v
v
v
v
Register changes
v
v
v
v
Edit packages
v
v
v
v
Edit projects and modules
v
v
v
v
v
Edit globals
v
v
v
v
v
Edit module content
v
v
v
v
v
v
v
The levels: Project, Module type and Module are accessible in an opened branch or project structure.
Managing groups
To manage a user group:
Switch to the Groups view by selecting Groups in the lower left corner of the User management screen.
Click the New button in the ribbon to create a new group or select an existing group from the left window pane and choose delete or edit from the ribbon.
To set group rights:
Create a new group or open a group for editing.
Enter a name for the group. The name has a maximum of 100 characters and cannot contain spaces.
Set rights to Granted or Denied for the appropriate rights and levels. If you wish to grant maximum rights to a user select the Administrator checkbox under the group name. This will automatically grant the user all possible rights.
Click Save.
Select the name of a right to get a short description of the right at the bottom of the window.
User rights that you set on a higher level will be inherited on all child levels. You can overwrite these inherited rights at a lower level. If you set or overwright a user right at a specific level it will be displayed in boldface.
This inheritance mechanism allows you to grant access on a generic level and deny it for specific instances on a more specific level.
Example
You could grant a user repository access on the generic level. But then deny the rights for one specific repository. Denying access on generic level and granting access at repository level for all but that one specific repository will give the same result, but is probably more work to maintain.
Project and module specific access
Setting user rights for specific projects, modules or module types is not available on the user management window. These rights are set in the branch for which they apply.
How to open the Manage Access window in a branch?:
Open a branch.
Select the option Branch at the lower left side of your window.
Select Manage access from the ribbon to open the access manager window.
You can specify project access when you open the access manager in the branch view.
How to open the Manage Access window in a project view?:
Open a branch.
Switch to the project view by selecting Projects from the left window pane.
Select a project from the list of projects.
Select view project structure on the project preview on the right window pane.
Select Manage access from the ribbon.
You can specify project, module type and module access when you open the access manager in the project structure view.
A list of groups is displayed on the left of the access manager window. On top of the window there are icons to create, delete or edit groups.
How to set Project or module(type) specific access?
Open the Manageproject Access window.
Create a new group or edit an existing group.
In the treeview on the left projects, module types and modules from this branch are displayed. Select the appropriate levels and set the access rights.
Managing users
To manage a user:
Switch to the Users view by selection Users in the lower left corner of the User management screen.
Click the New button in the ribbon to create a new user or select an existing user and choose Delete or Edit from the ribbon.
To edit a user account
Create a new user or open an existing user.
Enter a name and password for the user. The name has a maximum of 100 characters and cannot contain spaces.
Add the user to one or more user groups. This is done by clicking the new button and selecting the group you wish to add the user to. Repeat this step for each group you wish to add the user to.
Click Save.
No labels
1 Comment
Unknown User (jw.rutten)
Mind that only users with Admin rights can add users to a group.
1 Comment
Unknown User (jw.rutten)
Mind that only users with Admin rights can add users to a group.