19. Access Control

Controlling which users have access to an application and restricting actions. To recap the steps in the video:

Restrict access to app

1. Open the configuration form for the app Contact Manager
   1. Open the section Access Permissions
   2. Untick All Users Can View Application
   3. Save your changes
2. To test this:
   1. Create a user (remember you need to go into the Full Repository browser to do this)
   2. Don't forget to tick the Enabled flag for the user
   3. Add the User Group App User to the user
   4. Logout, and log back in as this user
   5. You should not be able to see the Contact Manager app

Add access to app

1. Log back in as your modelling user
2. Open the repository browser under the application Contact Manager
3. Add a User Group
   1. Call the user group Contact User and apply your changes
   2. Open the section Applications, and bring up the list of applications
   3. Drag in the application Contact Manager
   4. Still in the user group configuration form, add the test user
4. Log back in as your test user, and check that now you can access the Contact Manager app.

Create admin level access

1. Log back in as your modelling user
2. Go into the configuration for the button Import
   1. In it's configuration form, open the section Access Permissions
   2. Untick All Users Can Run Action
3. Open the repository browser under the app Contact Manager
4. Add a User Group
   1. Call the user group Contact Manager Admin
   2. Open the section Stream Actions
      • Bring up the list of actions
        • In the repository browser for actions, you will find all the actions you need under the stream ContactManager
      • Drag the actions for all administration functions into the user group i.e. Import
5. Create a test admin user
   1. Add this user to the user groups:
      • App User
      • Contact User
      • Contact Manager Admin

Now try logging in with both the test contact user, and the test contact admin. Ensure that the contact user cannot see the administration functions, but the admin user can.