Security

Security menu

Security option offers copying permissions from other users and changing permissions. Copying permissions from source principal (another user) copies all permissions.

	Permissions are copied
	Group membership is copied and group permissions.

When copying only permissions from a user who is also a member of a group, only user permissions are copied and not permissions from his group. When copying also group membership then also group permissions are copied and target user also becomes a member of a selected group.

None or Full permissions can be set:

	Undefined permissions are defined to none.
	Defined permissions are updated to none.
	Permissions are defined to none.

	Undefined permissions are defined and set to full.
	Defined permissions are updated to full.
	Permissions are defined to full.

- Permissions are undefined (removed).

- Applies changes made to authorizations. Refreshes user menu and permissions. Button is enabled only for current user.

When applying changes, a warning is displayed:

When setting permissions, user can mistakenly remove himself permissions to enter/login Pantheon. By applying changes user is warned of this situation.

Button  is also available on every form for setting permissions for single user.

Usergroup members

Adding Users to a Group

Adding a user to a group is carried out on a group of users, members tab. The right panel contains all users of the program and can be sorted by their activity status. By selecting an user and using "Add" button, user is assigned to current usergroup. By selecting user in the left panel and using "Remove" button, user is removed from the current usergroup.

When a new user is created it is by default no member of a usergroup. User may be a member of multiple usergroups at once - in this case, user inherits the highest/top permissions of the usergroup. Permissions that are explicitly set for a user are not inherited from the usergroup. User permissins take precedence over the permissions of the usergroup. Eg.: Usergroup1 has "Select" (only reading) permissions on Items registers and Usergroup2 has "Update" (writing) permissions on Items registers - User that is assigned to both usergroups will inherit "Update" (writing) permission which is higher.

Databases

Copying permissions from a usergroup to the same usergroup on other databases on the same SQL server instance. Databases where permissions will be copied must be selected. Multiple selection is possible with use of shift or ctrl keyboard button. Only user permissions are copied (permissions that are specificaly set on a user), permissions that user aquires from usergroup are not copied. At the end of copying there's a list of all databases where permissions were not copied because the database is of older version or user does not exist.

If user in target database does not have permissions for changing authorizations, copying permissions is disabled: