Summary

• Page properties (2 modified, 0 added, 0 removed)

Details

Page properties

Author

...	...	@@ -1,1 +1,1 @@
1		-XWiki.colinw
	1	+XWiki.michaely

Content

...	...	@@ -7,13 +7,17 @@
7	7
8	8	By default, the permissions system in iSymphony is disabled, allowing all users access to all actions in the panel. This can be changed with the toggle switch next to the page title.
9	9
10		-Each permission defined in the system is a combination of several pieces of information:
	10	+Permissions can be defined independently by subject and type, and each permission has a policy and a list of exceptions.
11	11
12		-1. Subject
13		-1. Type
14		-11. Targets
15		-1. Policy
16		-1. Exceptions
	12	+== Permission Subjects ==
	13	+
	14	+Permission subjects in iSymphony are the users and user groups. When viewing the permissions configuration page in iSymphony, the available subjects are listed on the left side of the screen. When evaluating whether a user is allowed to perform an action in the panel, iSymphony may check multiple subjects:
	15	+
	16	+1. The user themselves;
	17	+1. Any groups the user is a member of;
	18	+1. The //All Users// group
	19	+
	20	+The list above is checked in order to find the first permission that matches the correct type for the action. If no permission is found on one level, the next level is then checked. If multiple groups containing the user are found that define conflicting permissions for the same type, the result is permissive - the action is allowed. If no permission is found after checking the //All Users// group, the action is allowed.
17	17	{{/layout-cell}}
18	18
19	19	{{layout-cell}}
...	...	@@ -27,18 +27,8 @@
27	27
28	28	{{layout-section ac:type="single"}}
29	29	{{layout-cell}}
30		-== Permission Subjects ==
	34	+== (% style="line-height: 1.5;" %)Permission Types(%%) ==
31	31
32		-Permission subjects in iSymphony are the users and user groups. When viewing the permissions configuration page in iSymphony, the available subjects are listed on the left side of the screen. When evaluating whether a user is allowed to perform an action in the panel, iSymphony may check multiple subjects:
33		-
34		-1. The user themselves;
35		-1. Any groups the user is a member of;
36		-1. The //All Users// group
37		-
38		-The list above is checked in order to find the first permission that matches the correct type for the action. If no permission is found on one level, the next level is then checked. If multiple groups containing the user are found that define conflicting permissions for the same type, the result is permissive - the action is allowed. If no permission is found after checking the //All Users// group, the action is allowed.
39		-
40		-== Permission Types ==
41		-
42	42	The //type// of a permission determines what action it controls. When viewing the permissions configuration page in iSymphony, the available permission types are listed on the right side of the screen. Permissions can be controlled individually for each permission type.
43	43
44	44	=== Permission Targets ===
...	...	@@ -94,6 +94,10 @@
94	94	== Saving the changes ==
95	95
96	96	Once changes have been made to the permissions for a subject, the //Save Permissions// button in the top right corner of the screen will become enabled. Click this button to save and apply the permissions.
	91	+
	92	+= Glossary of Permissions =
	93	+
	94	+For a list of permissions that are available in the system, and what they control, see the list of child pages below.
97	97	{{/layout-cell}}
98	98	{{/layout-section}}
99	99	{{/layout}}