admin:managing_users

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
admin:managing_users [2024/09/03 10:52] – [Adding a group] Gary Willettsadmin:managing_users [2025/01/06 17:53] (current) – [Buttons on the Permissions tabs] Gary Willetts
Line 123: Line 123:
  
 === Buttons on the Permissions tabs === === Buttons on the Permissions tabs ===
-  * The //Store// drop down list: Selects the store for which permissions are being displayed and set on the current tab. Select the store you want to see or set permissions for in this drop down list.  +  * The //Store// drop down list: Selects the store for which permissions are being displayed and set on the current tab. Select the store you want to see or set permissions for in this drop down list.<WRAP tip center round 90%> 
 +You can type in the drop down list. If you do this, when you click on the down arrow to open it, you will only be shown stores in the list which start with what you typed. Or, if you prefix it with the mSupply wildcard character, "@", you only see stores which contain what you typed. Very helpful if you have many, many stores and want to find a specific one or group of stores. 
 +</WRAP> 
   * The **All on** button: Checks all the permissions on the current tab i.e. turns them all on. There are exceptions to this for safety reasons; the //Update pack size, cost and sell price//, //Add/edit users// and //Access server administration// permissions on the **Permissions** tab are not turned on with the **All on** button.   * The **All on** button: Checks all the permissions on the current tab i.e. turns them all on. There are exceptions to this for safety reasons; the //Update pack size, cost and sell price//, //Add/edit users// and //Access server administration// permissions on the **Permissions** tab are not turned on with the **All on** button.
   * The **Copy** button: Copies the state of all the checkboxes on the tab for this store to an internal clipboard for that tab. From version 5.03 onwards, the button opens this window:{{ :admin:pasted:20230509-121327.png?300 }}   * The **Copy** button: Copies the state of all the checkboxes on the tab for this store to an internal clipboard for that tab. From version 5.03 onwards, the button opens this window:{{ :admin:pasted:20230509-121327.png?300 }}
Line 141: Line 143:
 | Access server administration | If this is checked the user will be able to access the server administration windows, as described on the [[admin:server_administration#when_running_the_server_as_a_service|25.13. mSupply server administration]] page. Only assign this permission to users who really know what they are doing! | | Access server administration | If this is checked the user will be able to access the server administration windows, as described on the [[admin:server_administration#when_running_the_server_as_a_service|25.13. mSupply server administration]] page. Only assign this permission to users who really know what they are doing! |
 | Add/edit sync sites | If checked the user is able to edit site settings in a synchronisation system (see the [[synchronisation:sync_sites]] page for details). This includes being able to use the sync site wizard ([[synchronisation:site_wizard|]]). | | Add/edit sync sites | If checked the user is able to edit site settings in a synchronisation system (see the [[synchronisation:sync_sites]] page for details). This includes being able to use the sync site wizard ([[synchronisation:site_wizard|]]). |
-| Disallow adding an unordered item to a Goods Received note | If checked the user is **not** able to add items to a goods received note that are not included on a purchase order (see the [[receiving_goods:goods_receipts|]] page for details). |+| Disallow adding an unordered item to a Goods Received note | If checked the user is **not** able to add items to a goods received note that are not included on a purchase order (see the [[receiving_goods:goods_receipts|]] page for details) |
 | **Permissions (2) Tab** || | **Permissions (2) Tab** ||
 +| Add patients | If checked, the user can add new patients into the system |
 +| Edit patient details | If checked, the user can edit the details of patients already entered into the system. Of course, this means they can also view the details of patients in the system |
 +| View patients | If checked, the user can view patients' details in the system. If not checked then the user will not be able to see any patient details. |
 | Change transportation dates on finalised invoice | If checked, the user can edit the **Order written date**, **Order received date**, **Expected arrival date**, **Actual arrival date** and **Ship date** fields on the //Transport details// tab of finalised customer invoices | | Change transportation dates on finalised invoice | If checked, the user can edit the **Order written date**, **Order received date**, **Expected arrival date**, **Actual arrival date** and **Ship date** fields on the //Transport details// tab of finalised customer invoices |
 | Edit user fields on finalised invoices | The user fields are the 4 custom transaction fields that can be enabled in the preferences - see [[preferences:invoices#show_custom_transaction_fields|Invoices Preferences]] for details. If this is enabled the user can edit the contents of these fields on transactions that have already been finalised | | Edit user fields on finalised invoices | The user fields are the 4 custom transaction fields that can be enabled in the preferences - see [[preferences:invoices#show_custom_transaction_fields|Invoices Preferences]] for details. If this is enabled the user can edit the contents of these fields on transactions that have already been finalised |
Line 172: Line 177:
 {{ :admin:screenshot_2021-10-11_at_15.24.49.png?600 |}} {{ :admin:screenshot_2021-10-11_at_15.24.49.png?600 |}}
  
-To enable a partuclar alert type for a user simply check the checkbox in the //Is enabled// column. Any alert type that has its //Is enabled// checkbox unchecked will not be displayed for a user. +To enable a particular alert type for a user simply check the checkbox in the //Is enabled// column. Any alert type that has its //Is enabled// checkbox unchecked will not be displayed for a user.
- +
-**Show notifications window on login**: If this is checked, as soon as a user logs in, the notifications window (displaying all the notifications they have selected in the table above), will be displayed for them. If this is unchecked, the notifications window will only be shown when the user click on the notifications icon on the Navigator:+
  
 +**Show notifications window on login**: If this is checked, as soon as a user logs in, the notifications window (displaying all the notifications they have selected in the table above), will be displayed for them. If this is unchecked, the notifications window will only be shown when the user clicks on the notifications icon on the Navigator:
 {{ :admin:screenshot_2021-10-11_at_15.36.59.png?400 |}} {{ :admin:screenshot_2021-10-11_at_15.36.59.png?400 |}}
-<WRAP center round important 60%> 
  
-The notifications displayed in the desktop interface will only be for the store that the user has logged in to. +Please note that the notifications displayed realte only to the store that the user is logged in to.
-</WRAP>+
  
 +**Show cold chain breach alerts**: If this is checked the user will see temperature breach alerts (in the store in the **Store** drop down list above the table - this is a per store permission) passed to mSupply by the cold chain app (see [[https://docs.msupply.foundation/coldchain/introduction/]] for details). If this is not checked then a user will not see temperature breach alerts that occur in this store. Please note that a user must have login rights to a store to be able to see breach alerts, whether this permission is turned on or not.
  
  
-==== omSupply permissions tab ==== +==== Open mSupply permissions tab ==== 
-{{ :admin:pasted:20230509-120914.png?600 |}}+{{ :admin:pasted:20240903-112614.png?600 |}}
  
 This tab contains permissions that only affect Open mSupply users. Currently Open mSupply must connect to an existing mSupply server, which takes care of the authentication and synchronisation. Soon, when we've re-written the central synchronisation server in Open mSupply, there will be no need for this tab. Until then, permissions that only apply to users of Open mSupply will appear on this tab. This tab contains permissions that only affect Open mSupply users. Currently Open mSupply must connect to an existing mSupply server, which takes care of the authentication and synchronisation. Soon, when we've re-written the central synchronisation server in Open mSupply, there will be no need for this tab. Until then, permissions that only apply to users of Open mSupply will appear on this tab.
Line 193: Line 196:
 ^ Permission ^ Details ^ ^ Permission ^ Details ^
 | Can confirm internal order as sent | If checked then the user can //Finalise// an internal order in mSupply terms or //Send// it in Open mSupply terminology. | | Can confirm internal order as sent | If checked then the user can //Finalise// an internal order in mSupply terms or //Send// it in Open mSupply terminology. |
 +| Cold chain API access | If checked then the username and password of this user can be used to access the cold chain REST API built into Open mSupply. |
 +| Can modify central data | If checked then the user can edit settings that are counted as central data in Open mSupply e.g. demographics indicators. |
 +| Program permissions | This section is used to define which programs this user is allowed to view or edit data for. The table will contain a list of all the Open mSupply programs that have been setup in the datafile and there will be checkboxes for each in the //View// and //Edit// columns.\\ \\ Click on the appropriate checkboxes to check them and give the user the appropriate permissions.\\ The **Toggle view** and **Toggle edit** buttons check or uncheck all the checkboxes in the //View// and //Edit// columns respectively.\\ \\ If the list of programs is long you can type something in the //Search programs// box to make the list display programs that contain what you typed only. |
 ==== Login rights tab ==== ==== Login rights tab ====
 On this tab you set which stores the user can login to: On this tab you set which stores the user can login to:
Line 217: Line 223:
   * "Supervisor - All stores" stores is a special mode to allow users to view information in and run reports over multiple stores. See [[other_stuff:misc_topics#supervisor_mode_-_all_stores|here]] for more information.   * "Supervisor - All stores" stores is a special mode to allow users to view information in and run reports over multiple stores. See [[other_stuff:misc_topics#supervisor_mode_-_all_stores|here]] for more information.
  
 +**Sync user across all login stores:** This checkbox is only displayed if the currently logged in user is designated as a "special user" and they are logged into the primary server in a synchronisation system (the server where the system data iis edited). If this is checkbox is checked, when the **OK** button is clicked the user's details are synchronised with all the stores they are allowed ot login to. In this way, an administrator in a synchronisation system is able to edit user permissions and settings and have them automatically synchronised to all relevant sites.
 ==== Details tab ==== ==== Details tab ====
 {{ :admin:details_tab.png?600 }} {{ :admin:details_tab.png?600 }}
Line 284: Line 291:
  
 ==== Editing a group ==== ==== Editing a group ====
-First, show the list of groups by opening the "Edit user" window and then choosing "Groups" from the "Show" Drop-down menu+First, show the list of groups by opening the "Edit user" window and then choosing "Groups" from the "Show" Drop-down menu:
  
-{{ :admin:grouplst.png |}}+{{ :admin:grouplst.png?400 |}}
  
 Then double click on a group in the list. The same window as for adding a group opens but it is populated with the group's current settings. Change these settings as described for a new group above and click on the **OK** button to save them. Then double click on a group in the list. The same window as for adding a group opens but it is populated with the group's current settings. Change these settings as described for a new group above and click on the **OK** button to save them.
 +
 +=== Active users and groups ===
 +All permissions and most checkbox settings in a user settings are controlled by the group. One exception is login rights to different stores (managed for each user individually). Another exception is whether a user is active or not (active means that they are allowed to login to mSupply). By default, the active status of a group does not set the active status of all users in the group to match. However, you can make all users in a group inactive by editing the group and clicking on the **Update status for all members** button:
 +
 +{{ :admin:screenshot_2024-09-03_at_11.59.25.png?600 |}}
 +
 +When you click on the **Active** checkbox for a group it does nothing except changee the state of the checkbox. However, when you click on the **Update status for all members** button, all members of the group have their //Active// status set to that of the checkbox in this group.
  
 ==== Using groups ==== ==== Using groups ====
  • Last modified: 2024/09/03 10:52
  • by Gary Willetts