[OPEN-ILS-GENERAL] FW: Group and User permissions

[Walz, Jennifer]

All -

See my previous message below that no one replied to.   Any thoughts?

I also have some follow up questions.

  For instance.  When I assign a user to a "staff" account - does not matter what kind - it looks to me like several blanket types of permissions are automatically granted.   Even if no group permission are assigned to that group, when I go to the user permission editor, there are several basic boxes checked.   Such as "create_user" and "update_user".      However, when I assign a user to a "Patron" account, those permissions are NOT granted automatically.   Why is this?   What settings controls what default and blanket permissions are given to what types of users in the system?

  Second, I have no problem with the defaults being assigned, but I would like to know what they are for each group so I can understand what other permissions need to be added.   What I really want is I would REALLY like to remove some of them from individuals assigned to that group.   So, for instance, I have a staff user that is assigned to a staff category of "volunteer".  All good.   But then maybe one or two of the users in that volunteer category really should NOT be able to create, view, or update any user accounts.   When I go into the user permission editor for those users, I CANNOT REMOVE THAT PERMISSION!   I am appalled.   Why is this?    I get that maybe it is a default setting for that group of users, but in each user editor, shouldn't I be able to remove it if I would like?    But nothing I do will let me make this change.  Is this a bug?  Is this the way it is supposed to work?  If not, how do I make it work the way I would like?

  Some assistance with group and user permissions would be very much appreciated.   So far, it has befuddled me endlessly.

--------------------------------------------------
Jennifer Walz, MLS - Head of ILS stuff
Kinlaw Library -  Asbury University
One Macklem Drive, Wilmore, KY 40390
859-858-3511 ext. 2269
jlwalz at asbury.edu

From: Evergreen-admin [mailto:evergreen-admin-bounces at list.evergreen-ils.org] On Behalf Of Walz, Jennifer
Sent: Wednesday, December 03, 2014 4:56 PM
To: evergreen-admin at list.evergreen-ils.org
Subject: [Evergreen-admin] Group and User permissions


All -

  Ok.  I'm new but I am seeing some weird things and I am not sure if this is how the system works, or if there is something I am missing.

  We are on 2.6.1 in case that matters.

  So, as I understand it, you can set group permissions and assign a bunch of people to that profile (group) and they all have certain rights to do certain things.   I thought that maybe the user permissions were then available in case you might have one user or two in a group to ADD or DELETE certain permissions.    Is that not the case?   We might like to have maybe student workers all be "circulators" but one or two are given special permissions to work with cataloging or serials or such.    Am I understanding this correctly?    If we wanted to assign a "circulator" special elevated user permission for updating item records, I should be able to go into their patron record, open the user permission editor and assign them update_item_record (or some such).   Right?

Well, the problem is that we are trying to do something like that for several different pre-assigned groups and it is not working.   For the "volunteer" group for instance.  I have assigned several users in our system to that profile, but one or two need modifications.  When I go to that patron record, into the user permission editor, everything is greyed out and it won't let me change anything.   One or two permissions listed there I would like to remove (like Admin Toolbar!  What? For volunteers?) or even change the level at which they have permission.   Nope.  No dice.    And where is that admin toolbar thing set anyway?    Who gave volunteers that permission?  It is not listed in the group permissions editor.    (they can also see and edit the Library Settings!)

  So, why can I change some user permissions for patrons (I am having no trouble with our "catalogers"), but others are all sort of fuzzed out and won't let me add or delete anything in the user permission editor.  I can check a box and click save but nothing happens.   Do I have to start all over and just create all new groups first??   (and I AM the admin and logged in as such when trying all of this)

  Thanks for any insights you have.

Jennifer

--------------------------------------------------
Jennifer Walz, MLS - Head ILS Monkey
Kinlaw Library -  Asbury University
One Macklem Drive, Wilmore, KY 40390
859-858-3511 ext. 2269
jlwalz at asbury.edu<mailto:jlwalz at asbury.edu>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://libmail.georgialibraries.org/pipermail/open-ils-general/attachments/20150113/925df304/attachment-0001.htm>