Edit permissions

Main Page > User manual > UM-7 Administer ICA-AtoM > UM-7.2 1.0.9 Edit user permissions in ICA-AtoM 1.0.9

When refining user permissions, it is often useful to start with the group to which the user belongs. You can refine permissions for the group, then add users to the group, all of whom will inherit the modified permissions.

Scenario: In a multi-repository system, add a user who can create, update and publish archival descriptions belonging to one institution only.

1. 

   Fig.1. Default permissions for Contributor group in show screen
   In the main menu bar, go to admin > groups > contributor. Click on Archival description permissions. Your screen will show the default "grant" permissions for the Contributor group - i.e. it shows you everything the user is permitted to do (see fig.1)
2. 

   Fig.2. Default permissions for Contributor group in edit screen
   Click Edit. In the edit screen, you will get a better sense of the group's permission settings (see fig.2) . The Contributor has the following permissions:
   • Read: Grant (inherited from Authenticated group)
   • Create: Grant
   • Update: Grant
   • Delete: Deny (inherited from Authenticated group)
   • View draft (Grant)
   • Publish: Deny (inherited from Authenticated group)
   • Access master digital object: Grant
   • Access reference digital object: Grant (inherited from Authenticated group)

In other words, anyone belonging to the Contributor group automatically has the ability to read, create and update descriptions, view draft descriptions and access digital objects. However, s/he cannot delete or publish descriptions. In our scenario, we would like to create users who have all these permissions but who in addition can delete and publish archival descriptions from a particular institution.