admin:managing_users

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
admin:managing_users [2022/11/29 11:24] – [Buttons on the Permissions tabs] Gary Willettsadmin:managing_users [2023/07/10 23:47] (current) – [Notifications tab] Mark Glover
Line 125: Line 125:
   * The //Store// drop down list: Selects the store for which permissions are being displayed and set on the current tab. Select the store you want to see or set permissions for in this drop down list.     * The //Store// drop down list: Selects the store for which permissions are being displayed and set on the current tab. Select the store you want to see or set permissions for in this drop down list.  
   * The **All on** button: Checks all the permissions on the current tab i.e. turns them all on. There are exceptions to this for safety reasons; the //Update pack size, cost and sell price//, //Add/edit users// and //Access server administration// permissions on the **Permissions** tab are not turned on with the **All on** button.   * The **All on** button: Checks all the permissions on the current tab i.e. turns them all on. There are exceptions to this for safety reasons; the //Update pack size, cost and sell price//, //Add/edit users// and //Access server administration// permissions on the **Permissions** tab are not turned on with the **All on** button.
-  * The **Copy** button: Copies the state of all the checkboxes on the tab for this store to an internal clipboard for that tab. From version 5.03 onwards, the button opens this window:{{ :admin:pasted:20210704-222620.png?300 }}+  * The **Copy** button: Copies the state of all the checkboxes on the tab for this store to an internal clipboard for that tab. From version 5.03 onwards, the button opens this window:{{ :admin:pasted:20230509-121327.png?300 }}
     * In the //Permission tabs// section, select which tabs you want to copy the permissions from by checking their checkboxes.     * In the //Permission tabs// section, select which tabs you want to copy the permissions from by checking their checkboxes.
     * In the table, select the stores you want to copy the permissions of the current store to by checking them in the //Selected// column.     * In the table, select the stores you want to copy the permissions of the current store to by checking them in the //Selected// column.
Line 136: Line 136:
 ^ Permission ^ Details ^ ^ Permission ^ Details ^
 | **Permissions Tab** || | **Permissions Tab** ||
 +| View stock | If not checked the user is not able to view the current stock list (see the [[items:showing_batches]] page), view the Stock tab of an item's details window (see the [[items:item_basics:tab_stock]] page), not able to view stocktakes (see the [[items:stocktakes]] page) or view any reports in the //Stock and items// section on the //Reports// tab of the Navigator (see the [[reports:items_and_stock]] page). If this permission is checked then they can do all these things unless they are prevented by not having other permissions e.g. if a user has this permission but they do not have the //View stocktakes// permission then they will still not be able to access Stocktakes. |
 | Update pack size, cost and sell price | If checked the user is able to edit the pack size, cost and sell price of supplier invoice lines that have already had stock issued from them, //provided that the SI has not been finalised//. See the [[receiving_goods:supplier_invoices#editing_lines_on_a_supplier_invoice|7.01. Supplier invoices]] page for details. | | Update pack size, cost and sell price | If checked the user is able to edit the pack size, cost and sell price of supplier invoice lines that have already had stock issued from them, //provided that the SI has not been finalised//. See the [[receiving_goods:supplier_invoices#editing_lines_on_a_supplier_invoice|7.01. Supplier invoices]] page for details. |
 | Add/edit users | To prevent you being locked out of your datafile permanently, mSupply will not allow you to turn off this preference for the first 2 users which already exist when you open mSupply for the first time. You should always treat these users as admin users. | | Add/edit users | To prevent you being locked out of your datafile permanently, mSupply will not allow you to turn off this preference for the first 2 users which already exist when you open mSupply for the first time. You should always treat these users as admin users. |
 | Access server administration | If this is checked the user will be able to access the server administration windows, as described on the [[admin:server_administration#when_running_the_server_as_a_service|25.13. mSupply server administration]] page. Only assign this permission to users who really know what they are doing! | | Access server administration | If this is checked the user will be able to access the server administration windows, as described on the [[admin:server_administration#when_running_the_server_as_a_service|25.13. mSupply server administration]] page. Only assign this permission to users who really know what they are doing! |
-| Add/edit sync sites | If checked the user is able to edit site settings in a synchronisation system. This includes being able to use the sync site wizard ([[synchronisation:site_wizard|]]). |+| Add/edit sync sites | If checked the user is able to edit site settings in a synchronisation system (see the [[synchronisation:sync_sites]] page for details). This includes being able to use the sync site wizard ([[synchronisation:site_wizard|]]). | 
 +| Disallow adding an unordered item to a Goods Received note | If checked the user is **not** able to add items to a goods received note that are not included on a purchase order (see the [[receiving_goods:goods_receipts|]] page for details). |
 | **Permissions (2) Tab** || | **Permissions (2) Tab** ||
 | Change transportation dates on finalised invoice | If checked, the user can edit the **Order written date**, **Order received date**, **Expected arrival date**, **Actual arrival date** and **Ship date** fields on the //Transport details// tab of finalised customer invoices | | Change transportation dates on finalised invoice | If checked, the user can edit the **Order written date**, **Order received date**, **Expected arrival date**, **Actual arrival date** and **Ship date** fields on the //Transport details// tab of finalised customer invoices |
Line 147: Line 149:
 | Finalise stock transfers | If checked the user can finalise a customer invoice where the customer is another store (i.e. a stock transfer) | | Finalise stock transfers | If checked the user can finalise a customer invoice where the customer is another store (i.e. a stock transfer) |
 | Return stock from supplier invoices | If checked a //Return selected lines// button will appear for the user on finalised supplier invoices, allowing them to return the goods on the invoice. See the [[returning_goods:returning_to_supplier#create_a_supplier_credit_from_a_finalised_supplier_invoice|9.01. Returning goods]] section for details | | Return stock from supplier invoices | If checked a //Return selected lines// button will appear for the user on finalised supplier invoices, allowing them to return the goods on the invoice. See the [[returning_goods:returning_to_supplier#create_a_supplier_credit_from_a_finalised_supplier_invoice|9.01. Returning goods]] section for details |
 +| Return stock from customer invoices | If checked a //Return selected lines// button will appear for the user on finalised customer invoices, allowing them to return the goods on the invoice. See the [[returning_goods:receiving_from_customer]] section for details |
 | Pack boxes | If checked the user is allowed to manage boxes and assign stock to boxes on a customer invoice, even if the user does not have the //Edit customer invoices// permission. See the [[issuing_goods:boxes|]] page for details | | Pack boxes | If checked the user is allowed to manage boxes and assign stock to boxes on a customer invoice, even if the user does not have the //Edit customer invoices// permission. See the [[issuing_goods:boxes|]] page for details |
 | **Permissions (3) Tab** || | **Permissions (3) Tab** ||
Line 174: Line 177:
  
 {{ :admin:screenshot_2021-10-11_at_15.36.59.png?400 |}} {{ :admin:screenshot_2021-10-11_at_15.36.59.png?400 |}}
 +<WRAP center round important 60%>
 +
 +The notifications displayed in the desktop interface will only be for the store that the user has logged in to.
 +</WRAP>
 +
 +
 +
 +==== omSupply permissions tab ====
 +{{ :admin:pasted:20230509-120914.png?600 |}}
 +
 +This tab contains permissions that only affect Open mSupply users. Currently Open mSupply must connect to an existing mSupply server, which takes care of the authentication and synchronisation. Soon, when we've re-written the central synchronisation server in Open mSupply, there will be no need for this tab. Until then, permissions that only apply to users of Open mSupply will appear on this tab.
 +
 +This tab is included in the permissions copying functionality of the **Copy** button at the bottom of the window (see the [[admin:managing_users#buttons_on_the_permissions_tabs|Buttons on the permissions tabs]] section for details).
 +
 +^ Permission ^ Details ^
 +| Can confirm internal order as sent | If checked then the user can //Finalise// an internal order in mSupply terms or //Send// it in Open mSupply terminology. |
 ==== Login rights tab ==== ==== Login rights tab ====
 On this tab you set which stores the user can login to: On this tab you set which stores the user can login to:
Line 180: Line 199:
  
 If there are too many stores in the list, you can restrict the display by typing in the //Search stores// text box: only stores with names starting with what you type will be displayed. If there are too many stores in the list, you can restrict the display by typing in the //Search stores// text box: only stores with names starting with what you type will be displayed.
 +
 +If you need a more complex type of search then click on the **Complex search** button and this filter window will open (you will recognise it as very similar to the customer or supplier search window):
 +
 +{{ :admin:pasted:20230119-155542.png?350 |}}
 +
 +Make your filter selections as required, click on the **Find** button and only the stores which match the filters you have set will be displayed in the table.
 +
 +The **Toggle all in selection** button turns on (checks) all the //Can login// checkboxes for all the stores shown in the list. Clicking it again will turn them off.
  
 The //Is disabled// column indicates whether a store is disabled or not and can't be edited. The //Is disabled// column indicates whether a store is disabled or not and can't be edited.
Line 227: Line 254:
  
 ===== Managing and using groups ===== ===== Managing and using groups =====
 +
 +mSupply allows for a high granularity of user permission configuration.  There are literally hundreds of user permissions possible for each store in an mSupply system.  User groups assist with management of these user permissions.
 +
 +  * Users can be configured to:
 +    * Log in to particular stores
 +    * Have a range of general user permissions such as access to the dashboard
 +  * Users can also be configured to have permission to view or edit data while logged in to particular stores.
 +  * If users are a member of a group, then permission to view or edit data while logged in to particular stores is governed by the group membership.
 +
 +<WRAP center round important 60%>
 +A user can have permission to view or edit data while logged in to a particular store, either directly or through membership of a group.  If you want the user to //exercise// these permissions then they will also need to have permission to //log in// to the store ;-).
 +</WRAP>
 +
 +
 ==== Adding a group ==== ==== Adding a group ====
 Show the list of groups by opening the "Edit user" window and then choosing "Groups" from the "Show" Drop-down menu Show the list of groups by opening the "Edit user" window and then choosing "Groups" from the "Show" Drop-down menu
Line 236: Line 277:
  
 {{ :admin:group_add.png?600 |}} {{ :admin:group_add.png?600 |}}
 +<WRAP center round tip 60%>
 +
 +You will only be able to set checkboxes which can have different settings in different stores. Anything that is not a checkbox and or any checkbox that applies across all stores cannot be set in a group's permissions (another way of saying this is that they cannot be controlled by a group). These items will all be disabled when creating or editing a group and are editable in the individual users' permissions only.
 +</WRAP>
  
-Note that you will only be able to set checkboxes which can have different settings in different stores. Anything that is not a checkbox and or any checkbox that applies across all stores cannot be set in a group's permissions (another way of saying this is that they cannot be controlled by a group). These items will all be disabled when creating or editing a group and are editable in the individual users' permissions only. 
  
 ==== Editing a group ==== ==== Editing a group ====
  • Last modified: 2022/11/29 11:24
  • by Gary Willetts