A user can be in 6 groups with diverse rights in the database where certain higher groups have all rights of lower groups in addition to special rights for this group, e.g. the group DataReader can only read the data while DescriptionsEditor has the rights of DataReader and additionally can edit the data in descriptor tables - see overview below.
Summarzied overview of the permissions of the groups
| Role | Permissions in addition to lower role resp. user group | Inculded rights |
| Administrator | Edit own user permissions; use database maintenance functions | ProjectManager, CacheAdmin |
| ProjectManager | Create, edit and delete project data; import data with project information | TerminologyEditor |
| TerminologyEditor | Create, edit and delete descriptor data; import data without changing project information | DescriptionsEditor |
| DescriptionsEditor | Create, edit and delete description data | DataReader |
| DataReader | View description, descriptor, project and cache mapping data; export data | DataUser |
| DataUser | View descriptions without "withheld" descriptors and without resource data |
Two additional roles have been introduced for the handling of the cache database
| Role | Permissions in addition to lower role resp. user group | Inculded rights |
| CacheAdmin | Edit cache related table data | CacheUser |
| CacheUser | View cache database and project data | DataReader |
In addition to the mentioned roles a "System Aministrator" may use the Login administration to add other users to one of these groups and grant access to one ore more projects. If you are an "Administrator" you have the right to modify the projects assigned to your own login.
To place a user in one of the groups, go to the login administration. In the window that will open select a login and a database. The roles available in the selected database will be listed as shown below. Use the > and < buttons to add or remove roles for the login in the database (see below).
To see the detailed permissions of a role, select it in
the list of Available roles and click on the
button. A window as shown below will open listing all objects in the database the
role has permissions for (see below).
