Roles
Users can have different roles independent from their group memberships. Roles are "global rights" referring to the complete system.
-
Editor: An editor is a user who has the right to log on to the onion.net editor. Every created user is automatically an editor.
-
Administrator: Administrators have full access to the system. They have the right to see, edit and delete all objects. This role comprises the roles editor, user administrator and schema administrator. Administrators have the right to allocate rights to other users.
-
User administrator: User administrators have full access to the user administration. Moreover, they have an extraordinary right: User administrators (and thus also administrators) have the right to check out objects or undo the checkout of documents checked in by other users.
-
Schema administrator: Schema administrators have full access to the model administration.
-
Application server: The role application server has an exceptional position because it is a technical role. No (natural) person should have this role; only applications requiring read access on the content data should operate as application server.
As a matter of principle, no user has the right to change his own role or the role allocation of users of the same rank. Example: A user with the role administrator cannot allocate to or delete the administrator role of another user. Only the system administrator (user name "admin") has the right to do this.
Access data
