Access Control / User Maintenance: Difference between revisions

From CTMS
m (Minor formatting change)
 
(26 intermediate revisions by 3 users not shown)
Line 1: Line 1:
The administration function encompasses the set up and maintenance of users; the maintenance of system parameters and the configuration of the system. The administration module also allows for the viewing of error messages written by the system to an audit log.
This screen allows an Administrator to create a Menu structure at a Group Level. This allows a user to be associated to a group, which will give them enough visibility (screens, tabs) for them to perform their daily duties. Other functions can also be performed using this screen such as:-


=Access Control=
* Creating New Users.
* Creating multiple profiles for a user.
* Creating and amending new Groups.
* Editing User Profiles.
* Changing the passwords of Users.


User Groups are created to control the forms that a user can access and what capabilities/functions a user has within each form.
All these options will be explained in more detail below.


[[Image:acc_ctrl_1.png]]


When higlighting a Group name in '''Fig 1''' of the form the already assigned users will be shown in '''Fig 2'''
== Accessing the Screen ==
To gain access to the screen you must be an Administrator. A Standard user will not have visible of this menu option. It can be found by selecting the 'Administration' option followed by 'Access Control'.<center>
[[Image:ctrl_1.png]]
</center>


*'''Add User To Group'''
==Access Control Main screen==
This screen is view only and shows the existing User Groups and Users. Users can be associated to more than one group.


Any number of users can be added to a group, this is done by highlighting the appropriate group and pressing ‘Add User to Group’.  A list of users not already in the group will be displayed; it is then a matter of selecting the username.  
To view the Users for each group, the relevant Group Line should be highlighted.


*'''Remove User From Group'''
There are a series of buttons to allow the user to Drill down further to add or edit data, expanded below.<center>
[[Image:ctrl_2.png]]
</center>


If the user wants to remove a user from a specific Group then they should highlight the group, select the button and remove the required user from the group
==User Maintenance ==
Administrators are given the ability to create users and administer user passwords. When setting up a new user, the Username, User Type, Description and Password are required. Once a user has been created, there are a number of mandatory User Parameters which are also created and cannot be deleted. <center>
[[Image:ctrl_3.png]]
</center>


*'''Remove All Users Fron Group'''
===Creating a New User===
*Click the '''New''' Button. The user is then populated with the screen below:
<center>
[[Image:ctrl_4.png]]
</center>


Clicking on this button will remove all the users from the highlighted group
*Fill in the details on the Users screen, User Type being Internal and Based at starting with country of Residence e.g. UK.
*Click '''Save'''.
* The check box 'Allow Multiple concurrent sessions' allows a user to have several sessions to be opened without a warning being populated.


*'''Users Not In Group'''


When selecting this button, the user is presented with a canvas that shows all the user that have not been assigned to a group
===Editing a New User===
Within the 'Edit' function, the Administrator can temporarily disable a user's account or can force a user to change their password. A number of parameters allow multiple selections, i.e., take for example the Carrier user parameter, a user may only be able access one carrier, another user may be able access two carriers. This can be set up quite simply in this form.<center>
[[Image:ctrl_5.png]]
</center>


*'''User Maintenance'''
=== Change User Password===
The Administrator can change the password of any user - this may be because the user has forgotten it.<center>
[[Image:ctrl_6.png]]
</center>


This Button, when pressed will open up a new form which allows the user to Add new users and edit existing
===User Parameters===
By selecting the 'User Parameters' tab, the Administrator can limit the amount of data that is displayed to the user, for example, if a particular user should only see data belonging to a particular Cost Centre, then a user parameter can be added with a value selected from a list where appropriate.


*'''Change User Password'''
A number of parameters allow multiple selections, i.e. take for example the Carrier user parameter, A user may only be able access one carrier, another user may be able access two carriers.  This can be set up quite simply in this form. More details and a list of user parameters are referenced in the [[User Parameters]] section.


Allows the Administrator to change a users Passowrd
{{Note}} For new users, you should:
*Click '''Edit''' for the user you have just created.
*Edit users BASED_AT, COST_CENTER, ENTRY_FORM and SCHED_GROUP and click '''OK'''.


*'''Group Maintenance'''


Selecting this button opens up a new canvas allowting the user to create new groups and edit existing groups
=== Default Printers===
On selecting the 'Default Printers' tab an individual user can be allocated a default printer.


==Addin a User to a Group==


To add a user to a group take the following steps:
==Group Maintenance==
 
In order to determine which functions a group of users can perform the Administrator must identify the C-TMS business functions required. Once the menu structure has been identified, the Functions, Menus, Tabs, Reports, Extracts and Imports will need to be allocated in order to restrict/expand a user's group access to part or all functionality contained within.<center>
* Highlight the required Group that you want the user to be added to [fig 1]
[[Image:ctrl_7.png]]
 
</center>
* Click the 'Add User to a Group' button. A new form will be displayed [fig 2]


=== Creating a New Group ===
*Click Group Maintenance then click '''New'''.
* Give the Group a Name and Description and check Enabled.
*For each tab add or remove processes using the '''Add All'''/'''Remove All''' buttons or double clicking a process to add one at a time.
*Click '''Save'''.


[[Image:Acc_Control_3.png]]


===Editing a Group===
*For the ADMIN Group in the Menus tab uncheck 'In Menu?' for Interface Errors and then click '''Save'''.
*Exit Form and Look for this at Administration > Interfaces.
*Will not be available.
*Put the Menu back where it was and click '''Save'''.
*Check Administration > Interfaces to see it is back.


* Highlight the required user to be added [fig 3]


* Click the 'Add' button [fig 4]
=== Group Maintenance – Accessible Functionality===
The screen has a series of tabs that allows the administrator to modify the features that the users in this group can access.
* Functions - functionality within screens that is accessible to the users in the group.
*Menus - menu items that are accessible to the users in this group.
*Tabs - tabs within screens that are accessible to the users in this group.
*Reports - Reports that are accessible to the users in this group.
*Extracts - Extracts that are accessible to the users in this group.
* Imports - Imports that are accessible to the users in this group.


Lists of all available tabs and functions can be found in [[Access Control - Accessible Functionality]].


[[Image:Acc_Control_4.png]]
A list of all the accessible menus can be found in [[C-TMS Menu Hierarchy]].


==Remove User From Group==
The Imports are variable data that is maintained in [[Imports]] maintenance.


To Remove a User from a group take the following steps:
Available [[Extracts]] and [[Reports]] are covered in their respective sections.


*Highliight the required Group [fig 1]


*Highlight the required User [fig 2}
Each screen works similarly:
*A top panel shows the functionality that is accessible to the users in the group.
*A bottom panel shows the functionality that is currently not accessible to the users in the group.


*Click the 'Remove user from Group' button [fig 3]
To make functionality accessible, double-click the item in the bottom panel and it will be added to the top panel.


*A pop up screen will be displayed asking the user to clairfy the removal of the user from the group.Click the 'OK' button to remove the user [fig 4]
To make functionality inaccessible, double-click the item in the top panel and it will be removed and shown in the bottom panel.


[[Image:Acc_Control_2.png]]


== Group Maintenance ==
Example - tabs:


In order to determine which functions a group of users can perform the Administrator must identify the [[MTS]] business functions requiredOnce the menu structure has been identified, the Functions, Menus, Tabs, Reports, Extracts and Imports will need to be allocated in order to restrict/expand a user’s group access to part or all functionality contained within.  For example those groups with the function ADM_GEO_MAINT present allows users within that group to maintain locations via the locations form, if the form has been set up within the Menu structure.
This tab allows the administrator the ability to control which tabs a group has access to.  For example, the 'Bookings' group has access to the [[Trip Manipulation]] form, but they do not necessarily need to see anything to do with financeTherefore, the administrator can restrict access to the Finance tab to the Bookings group. All forms which have tabs can be controlled in this way, except the Access Control form, which assumes that the administrator has access to ALL the tabs.


=== Creating a New Group ===


<ul>
==Users and Groups==
<li>Click Group Maintenance then the New button</li>
<center>
<li>Give the Group a Name and Description and check Enabled</li>
[[Image:ctrl_8.png]]
<li>For each tab add or remove processes using the Add All/Remove All button or double clicking a process to add one at a time</li>
</center>
<li>Click Save</li>
</ul>


=== Editing a Group ===
===Adding a User to Group===
Any number of users can be added to a group, this is done by highlighting the appropriate group and pressing '''Add User to Group'''. A list of users not already in the group will be displayed; it is then a matter of selecting the username.


<ul>
<li>For the ADMIN Group in the Menus tab uncheck ‘In Menu?’ for Interface Errors and then Save</li>
<li>Exit Form and Look for this at Administration > Interfaces</li>
<li>Will not be available</li>
<li>Put the Menu back where it was and click Save</li>
<li>Check Administration > Interfaces to see it is back</li>
</ul>


=== Group Maintenance – Tabs ===
To add a user to a group take the following steps:


This tab allows the administrator the ability to control which tabs a group has access to.  For example, the ‘Bookings’ group has access to the [[Trip Manipulation]] form, but, they do not necessarily need to see anything to do with finance, therefore, the administrator can restrict access to the finance tab to the Bookings group. All forms which have tabs can be controlled in this way, except, the Access Control form, which assumes that the administrator has access to ALL the tabs.
* Highlight the required Group that you want the user to be added to.


==User Maintenance==
*Click the '''Add User to a Group''' button. A new form will be displayed.
<center>


Administrators are given the ability to create users and administer user passwords.  When setting up a new user, the Username, User Type, Description and Password are required.  Once a user has been created, there are a number of mandatory User Parameters which are also created and cannot be deleted.


<center>[[Image:acc_ctrl_2.jpg]]</center>
[[Image:Acc_Control_3.png|600px]]
</center>


*Highlight the required user to be added.


=== Creating and Editing a New User ===
*Click the '''Add''' button.
<center>


<ul>
<li>Click User Maintenance and then the New button.</li>
<li>Fill in the details on Users screen, User Type being Internal and Based at starting with country of Residence e.g. UK </li>
<li>Click Save.</li>
<li>Click Edit for the user you have just created.</li>
<li>Edit users BASED_AT, COST_CENTER, ENTRY_FORM and SCHED_GROUP and click OK.</li>
<li>Click Save
</ul>


Your new user has been created.
[[Image:Acc_Control_4.png|600px]]
</center>


=== Change User Password ===
===Remove User from Group===
Users can be removed from a group at any time just by highlighting the User and clicking the button.


The Administrator can change the password of any user - this may be because the user has forgotten it.


=== Disable User Access ===
To Remove a User from a group take the following steps:


Within the ‘Edit’ function, the Administrator can temporarily disable a user’s account or can force a user to change their password.
*Highlight the required Group.


=== Parameter Set up ===
*Highlight the required User.


A number of parameters allow multiple selections, ie, take for example the Carrier user parameter, A user may only be able access one carrier, another user may be able access two carriers.  This can be set up quite simply in this form. To read more about user parameter uses click [[User Parameters|here]].
*Click the '''Remove user from Group''' button.


=== Default Printers ===
*A pop up screen will be displayed asking the user to clarify the removal of the user from the group. Click the '''OK''' button to remove the user.
<center>
[[Image:Acc_Control_2.png|600px]]
</center>


On selecting the ‘Default Printers’ tab an individual user can be allocated a default printer and by selecting the ‘User Parameters’ tab, the Administrator can limit the amount of data that is displayed to the user, for example, if a particular user should only see data belonging to a particular Cost Centre, then a user parameter can be added with a value selected from a list where appropriate.
===Remove All Users from Group===
This button will remove all the users from a group in one action.


=== Change User Password ===


The Administrator can change the password of any user - this may be because the user has forgotten it.
*Highlight the required Group.


* Click the '''Remove All Users from Group''' button. This will open a box.


*Click '''OK''' to proceed and remove all the users.
<center>


== Audit Log ==


The [[Audit Log]] is used throughout the [[MTS]] system to record events and errors that occur during both forms and database execution. For example the MSMQ Daemon (a Visual Basic Application) writes a message to the Audit Log every 7 minutes.  This allows Administrators to determine whether [[MTS]]/Isotrak jobs are being processed.
[[Image:Acc_Control_5.png|600px]]
</center>


If the error type is set to ‘ERROR’ then the action flag is set to ‘YES’ in the [[Audit Log]].  Users can then search easily and deal with problems within [[MTS]].
=== Users not in a Group===
A list of users who do not belong to any group can be viewed. <center>
[[Image:ctrl_9.png]]
</center><noinclude>
[[Category:Maintenance|100]]
[[Category:C-TMS Modules|D-100]]
[[Category:C-TMS User Guide|BD-100]]
[[Category:C-TMS Admin|130]]
[[Category:TEST|D-100]]
</noinclude>

Latest revision as of 15:07, 26 July 2024

This screen allows an Administrator to create a Menu structure at a Group Level. This allows a user to be associated to a group, which will give them enough visibility (screens, tabs) for them to perform their daily duties. Other functions can also be performed using this screen such as:-

  • Creating New Users.
  • Creating multiple profiles for a user.
  • Creating and amending new Groups.
  • Editing User Profiles.
  • Changing the passwords of Users.

All these options will be explained in more detail below.


Accessing the Screen

To gain access to the screen you must be an Administrator. A Standard user will not have visible of this menu option. It can be found by selecting the 'Administration' option followed by 'Access Control'.

Ctrl 1.png

Access Control Main screen

This screen is view only and shows the existing User Groups and Users. Users can be associated to more than one group.

To view the Users for each group, the relevant Group Line should be highlighted.

There are a series of buttons to allow the user to Drill down further to add or edit data, expanded below.

Ctrl 2.png

User Maintenance

Administrators are given the ability to create users and administer user passwords. When setting up a new user, the Username, User Type, Description and Password are required. Once a user has been created, there are a number of mandatory User Parameters which are also created and cannot be deleted.

Ctrl 3.png

Creating a New User

  • Click the New Button. The user is then populated with the screen below:

Ctrl 4.png

  • Fill in the details on the Users screen, User Type being Internal and Based at starting with country of Residence e.g. UK.
  • Click Save.
  • The check box 'Allow Multiple concurrent sessions' allows a user to have several sessions to be opened without a warning being populated.


Editing a New User

Within the 'Edit' function, the Administrator can temporarily disable a user's account or can force a user to change their password. A number of parameters allow multiple selections, i.e., take for example the Carrier user parameter, a user may only be able access one carrier, another user may be able access two carriers. This can be set up quite simply in this form.

Ctrl 5.png

Change User Password

The Administrator can change the password of any user - this may be because the user has forgotten it.

Ctrl 6.png

User Parameters

By selecting the 'User Parameters' tab, the Administrator can limit the amount of data that is displayed to the user, for example, if a particular user should only see data belonging to a particular Cost Centre, then a user parameter can be added with a value selected from a list where appropriate.

A number of parameters allow multiple selections, i.e. take for example the Carrier user parameter, A user may only be able access one carrier, another user may be able access two carriers. This can be set up quite simply in this form. More details and a list of user parameters are referenced in the User Parameters section.

Note Note: For new users, you should:

  • Click Edit for the user you have just created.
  • Edit users BASED_AT, COST_CENTER, ENTRY_FORM and SCHED_GROUP and click OK.


Default Printers

On selecting the 'Default Printers' tab an individual user can be allocated a default printer.


Group Maintenance

In order to determine which functions a group of users can perform the Administrator must identify the C-TMS business functions required. Once the menu structure has been identified, the Functions, Menus, Tabs, Reports, Extracts and Imports will need to be allocated in order to restrict/expand a user's group access to part or all functionality contained within.

Ctrl 7.png

Creating a New Group

  • Click Group Maintenance then click New.
  • Give the Group a Name and Description and check Enabled.
  • For each tab add or remove processes using the Add All/Remove All buttons or double clicking a process to add one at a time.
  • Click Save.


Editing a Group

  • For the ADMIN Group in the Menus tab uncheck 'In Menu?' for Interface Errors and then click Save.
  • Exit Form and Look for this at Administration > Interfaces.
  • Will not be available.
  • Put the Menu back where it was and click Save.
  • Check Administration > Interfaces to see it is back.


Group Maintenance – Accessible Functionality

The screen has a series of tabs that allows the administrator to modify the features that the users in this group can access.

  • Functions - functionality within screens that is accessible to the users in the group.
  • Menus - menu items that are accessible to the users in this group.
  • Tabs - tabs within screens that are accessible to the users in this group.
  • Reports - Reports that are accessible to the users in this group.
  • Extracts - Extracts that are accessible to the users in this group.
  • Imports - Imports that are accessible to the users in this group.

Lists of all available tabs and functions can be found in Access Control - Accessible Functionality.

A list of all the accessible menus can be found in C-TMS Menu Hierarchy.

The Imports are variable data that is maintained in Imports maintenance.

Available Extracts and Reports are covered in their respective sections.


Each screen works similarly:

  • A top panel shows the functionality that is accessible to the users in the group.
  • A bottom panel shows the functionality that is currently not accessible to the users in the group.

To make functionality accessible, double-click the item in the bottom panel and it will be added to the top panel.

To make functionality inaccessible, double-click the item in the top panel and it will be removed and shown in the bottom panel.


Example - tabs:

This tab allows the administrator the ability to control which tabs a group has access to. For example, the 'Bookings' group has access to the Trip Manipulation form, but they do not necessarily need to see anything to do with finance. Therefore, the administrator can restrict access to the Finance tab to the Bookings group. All forms which have tabs can be controlled in this way, except the Access Control form, which assumes that the administrator has access to ALL the tabs.


Users and Groups

Ctrl 8.png

Adding a User to Group

Any number of users can be added to a group, this is done by highlighting the appropriate group and pressing Add User to Group. A list of users not already in the group will be displayed; it is then a matter of selecting the username.


To add a user to a group take the following steps:

  • Highlight the required Group that you want the user to be added to.
  • Click the Add User to a Group button. A new form will be displayed.


Acc Control 3.png

  • Highlight the required user to be added.
  • Click the Add button.


Acc Control 4.png

Remove User from Group

Users can be removed from a group at any time just by highlighting the User and clicking the button.


To Remove a User from a group take the following steps:

  • Highlight the required Group.
  • Highlight the required User.
  • Click the Remove user from Group button.
  • A pop up screen will be displayed asking the user to clarify the removal of the user from the group. Click the OK button to remove the user.

Acc Control 2.png

Remove All Users from Group

This button will remove all the users from a group in one action.


  • Highlight the required Group.
  • Click the Remove All Users from Group button. This will open a box.
  • Click OK to proceed and remove all the users.


Acc Control 5.png

Users not in a Group

A list of users who do not belong to any group can be viewed.

Ctrl 9.png