Users and groups
User management
Note: If LOGIN_REQUIRED=false
in the environment configuration, users can access the browser without logging into an account. No additional setup is needed for this role.
Registered
Basic user account (no special permissions).
Steps:
- Create a new user in the Admin panel.
- Do not check the "Staff status" or "Superuser status" checkboxes.
Note: This role is only required when LOGIN_REQUIRED=true
.
Staff
Can log into the admin panel with specific permissions assigned.
Steps: 1. Create a user in the Admin panel.
-
Check the "Staff status" checkbox.
-
Assign specific permissions by selecting the relevant options in the "User permissions" section.
- Example: Grant permission to manage specific models like genomes, annotations, etc.
Note: Staff users can only perform actions explicitly permitted by a superuser.
Superuser
Full access to the Admin panel and OpenGenomeBrowser features.
- Steps:
- Create a user in the Admin panel.
- Check both "Staff status" and "Superuser status" checkboxes.
Note: Superusers can create users, assign permissions, manage licenses, and configure the system.
Manage Groups
Groups are a way to manage permissions for multiple users at once. Instead of assigning permissions to each user individually, you can assign permissions to a group and then add users to that group. This makes managing roles and access control more efficient.
How to Use Groups:
- Create a Group:
- Go to the "Groups" section in the Admin panel.
-
Click "Add" and name the group based on its purpose (e.g., "Content Managers," "Genome Editors").
-
Assign Permissions:
- In the group creation or edit view, select the desired permissions from the "Permissions" field.
-
Example: A "Genome Editors" group might have permissions to add, edit, and delete genome data.
-
Add Users to the Group:
- Edit a user's account in the Admin panel.
- Assign them to the appropriate group(s) in the "Groups" section.
Example:
- A "Staff" user assigned to the "Genome Editors" group automatically inherits the permissions of that group. You don’t need to manually assign individual permissions to the user.