Authentication and authorization

Access to information and actions are dictated by permissions assigned to the user either directly or through groups and roles. ESSArch is designed such that each user has a single account which are reused across multiple organizations (groups) with different roles.

This means that a single user can have the role admin in one organization, an archivist in another and both in a third.

ESSArch has no requirement that any specific groups or roles are setup or used in an installation, this is all setup and configured according to the needs that the installation is supposed to meet.

The permissions available are therefore made in as small building blocks as possible to allow either very small and specific roles to be created but at the same time create roles that can do everything.

• Groups
  • Creating groups
  • Adding users to groups
• Permissions
  • Archival description
    • Agents
      • Agent Types
      • Main Agent Types
      • Agent Relation Types
      • Agent Name Types
      • Agent Note Types
      • Agent Identifier Types
      • Agent Place Types
      • Authority Types
    • Structures and nodes
      • Structures
      • Structure Types
      • Structure Units
        • Instance permissions
      • Structure Unit Types
      • Node Relation Types
      • Nodes
      • Node Types
  • Authorization
    • Users
    • Groups
    • Roles
• Roles
  • Creating roles
  • Assigning roles