source: indico/indico/htdocs/ihelp/html/UserGuide/Protection.html @ cd05ca

burotelhello-world-walkthroughipv6new-webexv0.97-seriesv0.98-seriesv0.98.2v0.98.3v0.98b1v0.98b2v0.99v1.0v1.1
Last change on this file since cd05ca was cd05ca, checked in by Jose Benito <jose.benito.gonzalez@…>, 3 years ago

[IMP] Booking Actions History

  • fixes #268
  • On the details page of a booking, the history of previous actions performed on that booking is displayed for the owner of the room, the people allowed to modify the booking and the administrators.
  • Updated the User Guide
  • reviewed by jbenito: doc regenerated
  • Property mode set to 100644
File size: 10.6 KB
Line 
1<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
2  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
3
4<html xmlns="http://www.w3.org/1999/xhtml">
5  <head>
6    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
7   
8    <title>9. Protection System &mdash; Indico v0.97 documentation</title>
9    <link rel="stylesheet" href="../_static/default.css" type="text/css" />
10    <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
11    <script type="text/javascript">
12      var DOCUMENTATION_OPTIONS = {
13        URL_ROOT:    '../',
14        VERSION:     '0.97',
15        COLLAPSE_MODINDEX: false,
16        FILE_SUFFIX: '.html',
17        HAS_SOURCE:  true
18      };
19    </script>
20    <script type="text/javascript" src="../_static/jquery.js"></script>
21    <script type="text/javascript" src="../_static/doctools.js"></script>
22    <link rel="top" title="Indico v0.97 documentation" href="../index.html" />
23    <link rel="up" title="Indico’s User Guide" href="index.html" />
24    <link rel="next" title="Indico’s Admin Guide" href="../AdminGuide/index.html" />
25    <link rel="prev" title="8. Event Evaluation" href="Evaluation.html" />
26   <link type="text/css" href="../_static/indico.css" rel="stylesheet"/> 
27
28  </head>
29  <body>
30    <div class="related">
31      <h3>Navigation</h3>
32      <ul>
33        <li class="right" style="margin-right: 10px">
34          <a href="../genindex.html" title="General Index"
35             accesskey="I">index</a></li>
36        <li class="right" >
37          <a href="../AdminGuide/index.html" title="Indico’s Admin Guide"
38             accesskey="N">next</a> |</li>
39        <li class="right" >
40          <a href="Evaluation.html" title="8. Event Evaluation"
41             accesskey="P">previous</a> |</li>
42    <li><a href="http://indico.cern.ch/">Indico Homepage</a> &raquo;</li>
43   
44        <li><a href="../index.html">Indico v0.97 documentation</a> &raquo;</li>
45
46          <li><a href="index.html" accesskey="U">Indico&#8217;s User Guide</a> &raquo;</li> 
47      </ul>
48    </div> 
49
50    <div class="document">
51      <div class="documentwrapper">
52        <div class="bodywrapper">
53          <div class="body">
54           
55  <div class="section" id="protection-system">
56<h1>9. Protection System<a class="headerlink" href="#protection-system" title="Permalink to this headline">¶</a></h1>
57<div class="section" id="introduction">
58<h2>9.1. Introduction<a class="headerlink" href="#introduction" title="Permalink to this headline">¶</a></h2>
59<p>This section aims to describe the protection system used by
60Indico to grant or restrict access to users.</p>
61</div>
62<hr class="docutils" />
63<div class="section" id="basic-concepts">
64<h2>9.2. Basic Concepts<a class="headerlink" href="#basic-concepts" title="Permalink to this headline">¶</a></h2>
65<div class="section" id="inheritance-schema">
66<h3>9.2.1. Inheritance Schema<a class="headerlink" href="#inheritance-schema" title="Permalink to this headline">¶</a></h3>
67<p>You can set up a protection policy for almost all the objects that
68you can create within Indico. This protection policy is based on an
69inheritance system, meaning that an object is going to inherit the
70protection from its father, e.g., a contribution can be public but
71becomes private if we set up its container (a meeting) as private.</p>
72<p>The protection objects tree is as shown in the following picture:</p>
73<p><img alt="image208" src="../_images/tree.png" /></p>
74<p>As we can see, a <strong>File</strong> inherits the protection policy from
75<em>Material</em>, <em>Material</em> from <em>Contribution</em>, <em>Contribution</em> from
76<em>Session</em>, <em>Session</em> from <em>Event</em>, <em>Event</em> from <em>Sub-category</em> and
77<em>Sub-category</em> from <em>Category.</em>
78The next picture shows an example of this inheritance system.
79&#8220;Category A&#8221; is PRIVATE and because of this, &#8220;Conference 1&#8221; becomes
80PRIVATE too. As User 1 and User 2 are in the access list for
81&#8220;Category A&#8221; they can also access &#8220;Conference 1&#8221;. The rest of Indico
82users cannot access &#8220;Category A&#8221; and &#8220;Conference 1&#8221;.</p>
83<p><img alt="image209" src="../_images/privByInh.png" /></p>
84</div>
85<hr class="docutils" />
86<div class="section" id="protection-types">
87<h3>9.2.2. Protection Types<a class="headerlink" href="#protection-types" title="Permalink to this headline">¶</a></h3>
88<p>For each object (category, conference, contribution, session,
89etc) in Indico, one can set up three kinds of protection:
90modification control list, access control setup, and domain control.</p>
91<ul class="simple">
92<li>The modification control list contains all the users or groups that can
93edit and modify an object. Therefore, people in this list will be
94the managers for the object and they can access all the pages
95related to it and the objects under it.</li>
96<li>Access control setup: by default, an object is public but we can
97make it private and add restrictions as shown in the section
98<a class="reference external" href="#id1">Access Control Policy</a>.</li>
99<li>Domain control: one can protect an Indico object to be accessed
100only by users who are connected from some given IPs (see
101<a class="reference external" href="#id3">Domain Control Policy</a>).</li>
102</ul>
103</div>
104</div>
105<hr class="docutils" />
106<div class="section" id="id1">
107<h2>9.3. Access Control Policy<a class="headerlink" href="#id1" title="Permalink to this headline">¶</a></h2>
108<p>By default, all the objects (category, event, session,
109contribution, material, file and link) in Indico are <strong>PUBLIC</strong>.</p>
110<p>We can set an object as PRIVATE and this means that all the
111objects under it will be PRIVATE as well.</p>
112<p>If an object is <strong>PRIVATE</strong>, nobody can access it but the
113managers, the users/groups in the access list named &#8220;Users allowed
114to access&#8221; and those who know the &#8220;access key&#8221; if set.</p>
115<p>If an object is <strong>PRIVATE by inheritance</strong>:</p>
116<ul>
117<li><p class="first">Nobody can access it but the managers and the users/groups in the
118access list &#8220;Users allowed to access&#8221; <strong>of its father</strong> (as
119example, see section <a class="reference external" href="#prot_inhe">&#8220;Inheritance Schema&#8221;</a>).</p>
120</li>
121<li><p class="first">We can set the PRIVATE object as <strong>PRIVATE by itself</strong>, which means
122that Indico checks only its protection policy and not the father&#8217;s
123protection policy.</p>
124<p><img alt="image210" src="../_images/privByItself.png" /></p>
125<p>In the graphic, &#8220;User 1&#8221; and &#8220;User 2&#8221; can access &#8220;Category A&#8221; but
126they cannot access &#8220;Conference 1&#8221;. Only &#8220;User 3&#8221; can access
127&#8220;Conference 1&#8221;.</p>
128</li>
129<li><p class="first">We can set the PRIVATE object as <strong>ABSOLUTELY PUBLIC</strong>, which means
130that Indico skips the protection that was established by inheritance.</p>
131<p><img alt="image211" src="../_images/absoPub.png" /></p>
132<p>In the graphic, only &#8220;User 1&#8221; and &#8220;User 2&#8221; can access &#8220;Category A&#8221;,
133but everybody can access &#8220;Conference 1&#8221;.</p>
134</li>
135</ul>
136</div>
137<hr class="docutils" />
138<div class="section" id="id3">
139<h2>9.4. Domain Control Policy<a class="headerlink" href="#id3" title="Permalink to this headline">¶</a></h2>
140<p>If an Indico object (category, event, session, contribution,
141material, file and link) is PUBLIC, we can restrict the access to
142users accessing Indico from some given IPs (these IPs could be like
143127.1 which means that every IP starting like this will be valid).</p>
144<p>If the Indico object is PRIVATE, this checking will not be
145applied.</p>
146<p>If you wish to add special access to some users, meaning that the
147domain control will not be applied for those users, you can add
148them in the &#8220;Users allowed to access&#8221; list.</p>
149</div>
150</div>
151
152
153          </div>
154        </div>
155      </div>
156      <div class="sphinxsidebar">
157        <div class="sphinxsidebarwrapper">
158   <img src="../_static/indico_logo.png" width="200px"/> 
159
160            <h3><a href="../index.html">Table Of Contents</a></h3>
161            <ul>
162<li><a class="reference external" href="#">9. Protection System</a><ul>
163<li><a class="reference external" href="#introduction">9.1. Introduction</a></li>
164<li><a class="reference external" href="#basic-concepts">9.2. Basic Concepts</a><ul>
165<li><a class="reference external" href="#inheritance-schema">9.2.1. Inheritance Schema</a></li>
166<li><a class="reference external" href="#protection-types">9.2.2. Protection Types</a></li>
167</ul>
168</li>
169<li><a class="reference external" href="#id1">9.3. Access Control Policy</a></li>
170<li><a class="reference external" href="#id3">9.4. Domain Control Policy</a></li>
171</ul>
172</li>
173</ul>
174
175            <h4>Previous topic</h4>
176            <p class="topless"><a href="Evaluation.html"
177                                  title="previous chapter">8. Event Evaluation</a></p>
178            <h4>Next topic</h4>
179            <p class="topless"><a href="../AdminGuide/index.html"
180                                  title="next chapter">Indico&#8217;s Admin Guide</a></p>
181          <div id="searchbox" style="display: none">
182            <h3>Quick search</h3>
183              <form class="search" action="../search.html" method="get">
184                <input type="text" name="q" size="18" />
185                <input type="submit" value="Go" />
186                <input type="hidden" name="check_keywords" value="yes" />
187                <input type="hidden" name="area" value="default" />
188              </form>
189              <p class="searchtip" style="font-size: 90%">
190              Enter search terms or a module, class or function name.
191              </p>
192          </div>
193          <script type="text/javascript">$('#searchbox').show(0);</script>
194        </div>
195      </div>
196      <div class="clearer"></div>
197    </div>
198    <div class="related">
199      <h3>Navigation</h3>
200      <ul>
201        <li class="right" style="margin-right: 10px">
202          <a href="../genindex.html" title="General Index"
203             >index</a></li>
204        <li class="right" >
205          <a href="../AdminGuide/index.html" title="Indico’s Admin Guide"
206             >next</a> |</li>
207        <li class="right" >
208          <a href="Evaluation.html" title="8. Event Evaluation"
209             >previous</a> |</li>
210    <li><a href="http://indico.cern.ch/">Indico Homepage</a> &raquo;</li>
211   
212        <li><a href="../index.html">Indico v0.97 documentation</a> &raquo;</li>
213
214          <li><a href="index.html" >Indico&#8217;s User Guide</a> &raquo;</li> 
215      </ul>
216    </div>
217    <div class="footer">
218      &copy; Copyright 2010, Indico Team.
219      Created using <a href="http://sphinx.pocoo.org/">Sphinx</a> 0.6.4.
220    </div>
221  </body>
222</html>
Note: See TracBrowser for help on using the repository browser.