Table of Contents

  • Introduction
  • Installation
  • Access Control
    · Introduction
    · Users and Groups
    · User Databases
    · Protection Points
    · Protection Classes
    · Permissions
    · Protection Points in SiteBuilder
    · Protection Points in RXML
    · Protection Points in Modules
  • Work Areas
  • Configuration
  • Users and Groups
    When something is requested from a SiteBuilder site, such as a web page or access to the Content Editor, the request receives an identity. There are two kinds of identities in the Access Control system, users and groups.

    If the requested information is restricted, the current identity will be checked for permissions. If the identity is a logged on user with the right permission, the request will return the requested information, otherwise an Authentication Required message will be displayed.

    If the identity is not a logged on user, information publicly accessible will be shown directly, but for restricted information a login window will appear where the user is asked to fill in user name and password. The request will then be processed as above.

    Users
    Users can have authentication modules added allowing them to log on to the system. The Internal Password module will ask for an authentication password at login. Users must be members of at least one group.

    To create a new user press the new user button and fill in the requested information.

    Groups
    Groups can have members, the members can either be users or other groups. For groups it is also possible to set permissions to different protection points.

    To create a new group press the new group button and fill in the requested information.

    Membership
    The "<" in the crossing between two groups indicates that membership cannot be set for this group, either because one of the groups is a member of the other or they are the same group. The different attributes to the membership are listed below.

    -Not a member.
    MExplicit member, i.e. set by the user.
    aAutomatic membership, i.e. set by one of the auth methods.
    mIndirect membership.
    ( )Explicitly not a member. Mainly useful to counteract an unwanted automatic membership.

    Assigning or withdrawing membership
    By clicking in the square crossing between two identities, the membership will toggle between "-", "M" and "( )".


    Setting "( )" between groups should be avoided since this makes the memberships difficult to follow. Also the module used when importing an AC data base cannot handle this.

    Remember that each user should be a member of the group "Everyone". Withdrawing the membership of this group will not prevent anyone from accessing any information, since pages that can be accessed by this group don't need any authentication.

    One group can also be a member of another group. For example, if group A is a member of group B, all members of group A will automatically achieve indirect membership of group B. Group B will then consist of all members in group A, plus the members of group B. Two groups are, however, not allowed to be members of each other. Group B, in this example, cannot be a member of group A, hence the "<" in the membership table.

    Changing identity settings
    Clicking the name of an identity in the Identities menu will allow the following tasks.

    • Change the name or user name of the identity.
    • Delete the identity.
    • Add, delete or change authentication methods, for instance change the password.

    Authentication methods
    When adding a new user you will be asked to fill in authentication methods. One identity can have several different authentication methods. You can, for instance, have a number of passwords.

    Internal password
    This is the default authentication module when adding new users. A password can be typed, twice, and the SiteBuilder will encrypt it. The encryption will be performed when clicking the change button. It is also possible to add an already encrypted password. The choice will be confirmed by clicking the change button.