Roles and permissions

SuperMap iPortal can use, create, share and manage a variety of geographic information resources, including: maps, services, scenarios, data, applications and so on. The ability of each iPortal user to access and use resources in the iPortal portal in different ways depends on the permissions it has in the portal, and permissions are assigned to iPortal users through roles.

• Character
  • Built-in character
  • Customize roles
  • PORTAL_VIEWER role and PORTAL_USER role of the difference and contact
• Authority

Character

SuperMap iPortal's roles include built-in roles and custom roles.

For newly registered users, iPortal's administrators can make the following role settings:

1. Newly registered users assign their default roles. The default roles include: PORTAL_USER and PORTAL_VIEWER. By default, the PORTAL_USER role is assigned to all newly registered users, IPortal's administrator canSet the default role.
2. The newly registered user assigns the DATA_CENTER role by default, IPortal's administrator can also set the default to the newly registered user to assign the DATA_CENTER role, the specific settings see:Set whether the registered user assigns the _DATA_CENTER_ role by default.

Built-in character

SuperMap iPortal defaults to the following built-in roles, where ADMIN, PORTAL_USER, and PORTAL_VIEWER are mutually exclusive. A user can not both exist in theory for two or three roles, and if there is a role that will ignore the lower priority, the priority order ADMIN> PORTAL_USER> PORTAL_VIEWER.

• ADMIN：Built-in system administrator. This role defaults to the use and administrative rights of the entire SuperMap iPortal. Users who are associated with the ADMIN role can add, edit, and delete other users of the ADMIN role, and need to be used with caution. SuperMap iPortal initialization creates a system administrator account that can not be edited and deleted if you forget your passwordFAQ to reset the administrator account.
• PORTAL_USER：Built-in SuperMap iPortal common user role. Have access to the iPortal portal, including the use, creation and sharing of portal resources.
• PORTAL_VIEWER：Built-in SuperMap iPortal viewer role (Associated with this role does not take permission for iPortal's number of users). Have access to the iPortal portal and view permissions for shared resources, such as logging in iPortal to view maps, services, scenes, apps, data resources, and so on. Users who have associated with the PORTAL_VIEWER role can not create their own resources and manage resources, such as unable to register services, create maps, create groups, upload data, and so on.
• NOPASSWORD：The third party logs the user's corresponding role. Including QQ, microblogging, CAS accounts, etc. are not stored by SuperMap iPortal users, these users can not change the password through iPortal.
• DATA_CENTER：Built-in SuperMap iPortal data uploader role. Have permission to upload data and publish services. Users who associate the role need to associate the PORTAL_USER role to log in to the iPortal portal, upload data, The role can not be associated with the ADMIN and PORTAL_VIEWER roles.

Customize roles

SuperMap iPortal supports the addition of custom roles that can be granted different portal administrative privileges. For example, you can grant portal domain configuration permissions for a custom role, so the user who associates the role will have portal site configuration capabilities, including home page customization, personal center customization, DataViz customization, directory management, and so on. Also, you can customize the departmental administrator role and assign permissions to it for resource management and user management, so the department administrator who associates the role can manage the resources and users of the department. For more information about custom roles, see:Management module authorization. Users who associate a custom role also need to associate the PORTAL_USER role to log in to the iPortal portal, which can not associate the ADMIN and PORTAL_VIEWER roles.

PORTAL_VIEWER role and PORTAL_USER role of the difference and contact

In some practical business applications, there is often a type of user who simply navigates and uses resources in the iPortal portal without having to assign them permission to create and share resources, which typically also accounts for a large percentage. For their association with the PORTAL_USER role, not only for its distribution of authority is too large, but also take up a large number of users permission, more harm than good. Based on this, SuperMap iPortal 9D provides the PORTAL_VIEWER role.

The PORTAL_VIEWER role is a new viewer role for SuperMap iPortal 9D for users who only need to browse the resources associated with the iPortal portal and do not take up the iPortal user license.

1. the difference of PORTAL_VIEWER role and PORTAL_USER role as follows:

• Own iPortal permissions are different

Users who are associated with the PORTAL_VIEWER role only have permission to view the resources they share with. The users who associate the PORTAL_USER role have more capabilities, and have permission to create and share portal resources in addition to the permissions of the PORTAL_VIEWER role. For more information, see:Table _1_SuperMap_iPortal_ Permission division of built-in roles.

• The number of iPortal users is different

Users who only associate the PORTAL_VIEWER role will not be licensed for the iPortal user, and the user associated with the PORTAL_USER role will use the iPortal user license.

2. the contact of PORTAL_VIEWER role and PORTAL_USER role as follows:

• PORTAL_VIEWER role can be upgraded to PORTAL_USER role, the need for the administrator to remove the PORTAL_VIEWER role, and then associated PORTAL_USER role can be, after the upgrade users will take iPortal the number of users license and has the authority to create and share portal resources.
• The PORTAL_USER role can also be downgraded to the PORTAL_VIEWER role, requiring the administrator to remove the PORTAL_USER role and then associate the PORTAL_VIEWER role. The degraded user will not take iPortal the number of users is licensed and only has permission to view the resources associated with it. The resource created by the user before the downgrade will only have the permission to browse (which can be viewed in the resource list) and no longer have permission to edit.

Note: If you want to associate a custom role for a user of the PORTAL_VIEWER role (the administrative role is assigned administrative privileges via module authorization), first upgrade the PORTAL_VIEWER role to the PORTAL_USER role before proceeding.

Authority

The permissions for SuperMap iPortal's built-in roles are as follows:

Table 1: Permissions for SuperMap iPortal built-in roles