Changes between Version 6 and Version 7 of MultiUser

Timestamp:

Sep 20, 2011, 12:19:50 PM (13 years ago)

Author:

davea

Comment:

--

MultiUser

@@ -44 +44 @@
   If this flag is set, the user can submit jobs to any application,
   included those added in the future.
- * '''admin_all_apps'''.
+ * '''manage_all_apps'''.
   If this flag is set, the user
-  * has admin privileges for all apps (see below)
-  * can grant and revoke the privileges of any user
+  * has '''manage''' privileges for all apps (see below)
+  * can grant and revoke the privileges of any user,
+    except '''manage''' privileges.
   * can create and deprecate apps
-  * set user quotas (see below)
+  * can set user quotas (see below)
 
 The per-app privileges include
  * the ability to submit jobs to the app
- * '''admin''': if this flag is set, the user can
+ * '''manage''': if this flag is set, the user can
   * create and deprecate versions of the app
   * grant and revoke per-app permissions for this app
+    (except '''manage''' permissions).
   * abort any job of this app
   * view the output files of any job of this app
 
-Users can be given '''admin_all_apps''' permission via the
-'''User access control''' link in the project admin web interface.
-All other access control is done via the submit_permissions.php page
-on the main web site.
+'''Manage''' privileges are controlled using scripts on the server;
+they can be granted and revoked only by project admins.
+
+Other permissions are controlled via the submit_permissions.php page
+on the project web site.
 
 == User quotas ==