Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Version History

« Previous Version 12 Next »

Feature Description

The Identity and Access Management feature distributes authority to users. Securing the system means that the administrator gives different control to users. To accommodate different needs, Canvas includes various security options. This feature will allow users to lock some functionality behind a login system to prevent unauthorized users from interacting with objects. Specific login Groups and Permissions can be set to help organize users.

Designer Functionalities

The Identity and Access Management window can be opened by clicking Tools > Identity and Access Management.

The first step of the Security configuration is the registration of a user account and password. The next step is to assign a security level to each account. These configurations only let verified users control specific functions.

Only one account can log in to the system at a time when several user IDs exist in the project. If another user logs in to the project, the current user ID is automatically logged out.

Users

Users can be set up to allow specific permissions and actions when a user is logged in or out. In the Users tab, click the + or Add User icon and add any configurations needed to create the user. Once done, click OK, and the user will be made. Once created, users can be logged into and interact with anything they have permission to interact with. Users will be able to have an email set up to have notifications sent to the email provided.

To edit a user, click on the username that needs to be edited and click on the Edit User icon. This will redirect back to the configuration menu, where any changes can be made to the user. Once done with edits, click the OK button to apply the changes.

To delete a user, click on the username to be removed and click on the Delete User icon. The username will then be removed from the list and cannot be logged into.

A login system must be implemented to access any user that has been created.

One option is to use the Open Login Window and Logout User commands. These are available for every page and object that has actions available to it. Clicking Open Login Window will bring up a login screen with a Username and a Password field. Clicking Logout User will log out the currently logged-in user.

The second option is to use the system.login(“UserID”,”Password”) and system.logout() subroutines inside of a script. The system.login(“UserID”,”Password”) subroutine will log in with the provided username and password. The system.logout() subroutine will log out the currently logged-in user.

Groups

Groups are used to organize users under an umbrella to give permissions to multiple users at a time. To create a group, click the Group tab in the Identity and Access Manager window. Once on the Group tab, click the + or Add Group icon to create a group. Multiple users and permissions can be placed under the newly created group. Once all additions are made, click the OK button to finish creating the group.

To edit a group, click on the group to be edited and click on the Edit Group icon. This will redirect back to the configuration menu, where any changes to the group can be made. Once done with edits, click the OK button to apply the new changes.

To delete a group, click on the group to be removed. Once selected, click the Delete Group icon to remove the group from the list. Any users under the group will lose any respective permissions they had received from the group.

Permissions give users access to specific functionality and prevent unauthorized access to particular portions of the program. To create a Permission, first go to the Permission tab. Once in the Permission tab, click the + or Add Permission icon to make a new permission. Once the permission is named, hit Enter or click off of the new permission to stop editing. A description can be added by double-clicking the Description field, typing the description needed, and then hitting Enter or clicking off the new description to stop editing.

To edit any permission, double-click either of the fields and type in any changes.

To delete a permission, select a permission to be removed and click on the Delete Permission icon to remove it from the list. The removed permission will be automatically removed from any users that had it previously assigned.

Adding Permissions

Objects with actions available can have permissions set onto the object. To select a permission, go to the Action tab on any object. Click on the Change Permissions icon to add permission to the object. Once the permission is added, any users without the correct permission will no longer be able to interact with the object.

When permissions, users, and groups are set, specific objects will not be available during runtime if they require specific permission to run. Users can access these permissions with the login function.

Login Functionality

To access permissions to interact with objects, the user must first be signed into an account with permission to interact with them. When an object has the action to create a login window upon interaction, the user must type in the username and password to access the account. The username is not case-sensitive; however, the password is case-sensitive.

Logout Functionality

Users can also log out of accounts during runtime to change accounts. There is no indication that the user has successfully logged out by default. Once the user is logged out, objects that require permission to be interacted with will no longer be able to be interacted with and will send an on-screen notification that the user has insufficient permission.

  • No labels

0 Comments

You are not logged in. Any changes you make will be marked as anonymous. You may want to Log In if you already have an account.