UserRoles

A user can receive permissions by being a member of a group or by being assigned roles for his user.

Through the membership in a group, a user receives permissions for data objects and ChangeSets.

A user receives higher permissions by means of the roles.

Values

None

This value is the default value for new users. No roles are set for these users.

SchemaManager

With this role, a user may administrate the schemas in onion.net.

UserManager

With this role, a user may administrate users and groups in onion.net.

However, a user with the role of user manager may not administrate users who are also user managers, administrators or the user admin.

Administrator

With this role, a user receives the administrator permissions.

The permissions of this role are as follows:

• The user may see and administrate all data objects.
• The user may see and administrate all ChangeSets.
• The user is an editor and live editor.
• The user is user manager. He may not administrate administrators and the user admin however.
• The user is schema manager.
• The user may transfer editing processes to other users.

Editor

This role is specific for the onion.net Editor. If a user has this role plus at least reading rights to the root data object, then the user may log onto the Editor.

This user may make no changes in the Productive Environment however. To do this he needs at least the role of live editor.

LiveEditor

This role extends the role of editor to include the function of editing data in the Productive Environment. The extent to which the user may edit in the Productive Environment continues to depend on the permissions of the group memberships. However, editing in the Productive Environment is no longer ruled out altogether if the user has this role.