Permissions Tutorial: Add a Read-Only User Described here is how to setup read only users, perhaps the most basic use of DBGallery s access control. This quick walk-though should be very easy. It may seem daunting due to the number of steps but it is VERY simple and takes approximately 5 minutes! Subsequent users take even less. It is assumed some images have been added already. If not, at least one folder if you are added a user as you follow this guide. It is also presumed that no other users have been setup, but it is ok if there are some already you may be new to DBGallery with others before you having already set some up. A summary of where we re goingg to do here follows, and is really just 3 steps: 1. Open the Permissions pages to add a new user. 2. This user is assigned the build-in Read-Only role. 3. Assign the new user View permissions to the appropriate folders. Step 1 Open DBGallery and choose Application Settings, as showing below in Figure 1. Figure 1: Choosing Application Settings
Step 2 Check User Security Enabled in the Advanced Connection and Permissions tab. (Note you ll need to click that tab, by default the incorrect tab UI Basics appears.) This is shown in Figure 2. Figure 2: Check User Security Enforced 2 P a g e
Step 3 Once the checkbox is pressed, if there has not yet been a top level administrator password one will be prompted for. If figure 3 shown below doesn t appear, proceed to the next step, otherwise key the top level administrator password. Choose something you will remember. There are no restrictions on length or complexity. NOTE: DBGallery uses SuperAdmin as the build-in user name for a top level administrator. Figure 3: Top-level Administrator password prompt 3 P a g e
Step 4 Press the User Permissions button as shown in Figure 4. This opens up the permissions pages please give it a little time to start up since it s a little slow the first time loading. - Figure 4: The User Permissions button 4 P a g e
Step 5 Press the Add New User button. This will bring you to the Add New User page shown in Step 6. Figure 5: The Add New User button 5 P a g e
Step 6 Here is where the new read-only user gets added to the system. There are 3 things to do here, as shown in Figure 6: 1) Key the Login, Password, and Full Name. This is where you would pause to ensure the correct information is available about the actual new user: What login name would they like, what their password should be, and how to spell their last name. 2) Select the Read Only checkbox under Roles so it is checked as shown. (More on Roles a bit later.) 3) Press the Save button. Figure 6: The New User page 6 P a g e
Step 7 The user has been added to the system at this point, but has no permissions to view any images. Here we ll setup the new user, Kris, for View access to a folder. NOTE: By default, new users are not able to do anything inside DBGallery; what they can do needs to be explicitly set, especially which folders they have access to. Now that Step 6 has been completed, close out the Permissions and Application Settings dialogs so you are back to the main DBGallery window as shown below. Now right click on a folder as shown in Figure 7. This will allow us to provide View access to the new users ( Specific Photo Qualities was right-clicked on in the Figure 7 screenshot). Choose the Set Permissions menu option. Figure 7: The tree folder context menu showing Set Permissions 7 P a g e
Step 8 In the Folder Permissions page which appears, who can do what to which folders is set. Here again there are 3 things to do (matching the red arrows in Figure 8): 1) Select Read Only in the list on the left. This selects the Role the user was assigned to, Read Only, which was done in Step 6. 2) On the right side blue area, select the very first option: Read View images and subfolders. This says that the read-only role is now able so the person can View images. They will not be able to do anything to files in that folder. A small note: the Current Folder name is shown just under the header near the top of the page. 3) Press Save Changes Figure 8: Setting View privileges for the selected folder to our read-only user 8 P a g e
Step 9 Press the red X in the Folder Permissions window to close it. Then close DBGallery itself (again by pressing the red X in its top right corner). Now start DBGallery again and we ll login to check the appropriate privileges were set. At the login screen, enter Kris as the User Name, and then the password your had entered in Step 6. Press the Enter key, or click Sign me in. Figure 9: Logging back in with the newly created user. 9 P a g e
Step 10 This very last step is just to check that permissions where set correctly. To do that simply right-click the same folder chosen in Step 7. What you ll notice is that this user is unable to do anything except view that folder. Figure 10: Verifying nothing destructive may be performed. A Note on Users and Roles: A thing you may have noticed a thing here: It wasn t the user we just created which was assigned direct access to the folder. Instead we assigned the role the user is in to the folder. This is important to keep in mind when administering users for DBGallery: Users are assigned to a Role. Roles were assigned Folder permissions. I.e. Roles where provided specific folder access rights assigned to them. More is explained about Roles in tutorials involving more complex permissions scenarios. Summary If all you need to do is have a number of read-only users (aka View only), and of course a top-level administrator or two, you needn t get into more complexities regarding permissions, and you likely need not go beyond this tutorial for setting up users. If additional read-only users are required, simply follow these same steps laid out here for all read-only users. Then for each system Administrator beyond the one already setup, do the same thing but choose SuperAdmin where Read Only is specified in Step 6. 10 P a g e