Actions

Manage users: Difference between revisions

From LimeSurvey Manual

No edit summary
No edit summary
Line 1: Line 1:
<div class="simplebox">'''Note:''' This aritcle is currently being updated/re-translated form the german version. Please remain from editing this page unless this banner is removed.
Thank you! vierundzwanzig</div>


__TOC__
__TOC__
Line 10: Line 6:
To create a new user you please open the user-management ('''main menu''' -> '''Create/Edit users ''' [[File:LimeSurveyBenuzerVerwaltung.jpg]]).
To create a new user you please open the user-management ('''main menu''' -> '''Create/Edit users ''' [[File:LimeSurveyBenuzerVerwaltung.jpg]]).


[[File:LimeSurveyBenutzerHinzufuegen.jpg]]
[[File:LimeSurveyAddUser.jpg]]
* Enter the desired username into the textfield '''Username'''.
* Enter the desired username into the textfield '''Username'''.
* Enter the email adress into the textfield  '''Email'''. Please note
* Enter the email adress into the textfield  '''Email'''. Please note
Line 39: Line 35:
To set global permissions for a user just click the key symbol [[File:LimeSurveySchluesselSymbol.jpg]].
To set global permissions for a user just click the key symbol [[File:LimeSurveySchluesselSymbol.jpg]].


[[File:LimeSurveySetzeGlobalBer.jpg]]
[[File:LimeSurveySetGlobalPermissions.jpg]]


You can now add or remove the following permissions.
You can now add or remove the following permissions.
Line 59: Line 55:
To set/edit the template permissions for a user for a user simply click the key symbol for design templates [[File:LimeSurveySchluesselSymbolTemplates.jpg]].
To set/edit the template permissions for a user for a user simply click the key symbol for design templates [[File:LimeSurveySchluesselSymbolTemplates.jpg]].


[[File:LimeSurveyAuswahlDesignTemplatesLS.jpg]]
[[File:LimeSurveySetDesignTemplatesLS.jpg]]


You can now select the design templates this user can select. After you finished your selection/deselection just hit '''Save settings''' .
You can now select the design templates this user can select. After you finished your selection/deselection just hit '''Save settings''' .
Line 75: Line 71:
To change the survey permissions you have to select '''Survey permissions''' from the '''Survey properties''' menu.
To change the survey permissions you have to select '''Survey permissions''' from the '''Survey properties''' menu.


[[File:LimeSurveyUmfragenBerechtigungen.jpg]]
[[File:LimeSurveySurveyPermissions.jpg]]


In the next step you select the user you want to change the survey permissions and click '''Add user'''.
In the next step you select the user you want to change the survey permissions and click '''Add user'''.


[[File:LimeSurveyBenBerHinz.jpg]]
[[File:LimeSurveyAddSurveyPermission.jpg]]


After you click '''Set survey permissions''' the survey permissions matrix for the survey and user will be shown.
After you click '''Set survey permissions''' the survey permissions matrix for the survey and user will be shown.


[[File:LimeSurveyBenutzerBerechtigungMatrix.jpg]]
[[File:LimeSurveyUserPermissionMatrix.jpg]]


In this matrix you can set the permissions for the different features and parts. You simply click  a checkbox if you want to add or remove this permission. If you click a checkbox in the first column all permissions for this line will be selected/removed.
In this matrix you can set the permissions for the different features and parts. You simply click  a checkbox if you want to add or remove this permission. If you click a checkbox in the first column all permissions for this line will be selected/removed.
Line 125: Line 121:
* Set survey permissions to: '''Responses''': '''View/read''' and '''export''' , '''Statistics''': '''View/read'''
* Set survey permissions to: '''Responses''': '''View/read''' and '''export''' , '''Statistics''': '''View/read'''


[[File:LimeSurveyKundeEigeneAuswertung.jpg]]
[[File:LimeSurveyCusomerOwnStatistics.jpg]]


----
----

Revision as of 15:51, 26 January 2012

Create users

To create a new user you please open the user-management (main menu -> Create/Edit users File:LimeSurveyBenuzerVerwaltung.jpg).

  • Enter the desired username into the textfield Username.
  • Enter the email adress into the textfield  Email. Please note
    • If you don't want the user to recieve the confirmation e-mail with a link to the LimeSurvey installation, username and password you can use your own email adress to send the confirmation email to you. After that you can change the email adress to the adress of the user.
    • LimeSurvey sends out a confirmation e-mail to the adress enterd into Email. This email adress will be used as standard contact email adress for surveys created by this user.
  • Enter the users full name into the textfield Full name . Please note
    • The full name entered here will be used as standard contact person name for surveys created by this user.
  • Click Add user

So you created a new user. You will find out more about setting user permissions if you continue reading further.

Edit users

You can use the pen symbol to edit a user.

You can set a new email adress, full name and even change the password. If you have finished what you want to do click Save.

Delete users

To delete a user account simply click the delete button in the line with the user account that should be deleted and hit OK.

Global permissions

Global permissions apply to the whole LimeSurvey installation. If you want to set permissions only for a specific survey you can use the Survey permissions settings.

Setting global permissions for a user

To set global permissions for a user just click the key symbol .

You can now add or remove the following permissions.

  • SuperAdministrator: This permission can only be added or removed by the  Diese Berechtigung user called admin and grants full rights to the whole LimeSurvey installation. Please note: This permission is very powerful and you should be very carfefully with granting this permission/right.
  • Create survey: This permission lets the user create a survey as well as start, stop and it . This is the standard permission for people creating their own surveys.
  • Configurator: With this permission a user can check data integrity, save the SQL database to an sql file and view the php info in the global settings.
  • Create user: Having this permission a user can create new users and delete users created with this account. The newly created users cannot have higher permissions than the parent. If this has to be done a SuperAdministrator has to grant the permissions.
  • Use all/manage templates: It allows the user to use all design templates and edit all non standard templates. A person with this permission should have sufficient knowledge in terms of  HTML/php, Javascript and CSS. If a user not familar with this things should use a specific design template it would be better to use the template permissions.
  • Manage labels: This permission grants all rights regarding label sets (create, edit and delete).

The most important use cases for granting user permissions are collected at the use cases part of this article.

Setting template permissions for a user

With template permissions you can set which design templates a user can select when creating or editing a survey. It might be a good idea to restrict the design templates a user can select in order to prevent unwanted design templates to be used in a survey.

Please note: If you have a specific design template for a group of users or customers you might want to restrict the access for them to use only the template created for their purpose.

To set/edit the template permissions for a user for a user simply click the key symbol for design templates .

You can now select the design templates this user can select. After you finished your selection/deselection just hit Save settings .

The most important use cases for granting user permissions are collected at the use cases part of this article.

Setting permissions for a single survey

These permissions only apply for a single survey. If you want to set permissions for the whole system you can use the global permissions.

Please note: An existing user account is required to set permissions for a single survey. If it doesn't exist you have to create it first and then change the survey permissions. You don't have to apply any global permissions to the user, it is just necessary that the user account itself exists.

Setting user permissions for a single survey

To change the survey permissions you have to select Survey permissions from the Survey properties menu.

In the next step you select the user you want to change the survey permissions and click Add user.

After you click Set survey permissions the survey permissions matrix for the survey and user will be shown.

In this matrix you can set the permissions for the different features and parts. You simply click  a checkbox if you want to add or remove this permission. If you click a checkbox in the first column all permissions for this line will be selected/removed.

In the other columns you can choose whether a user can do a single actions from this feature/part.

After you finished editing the survey permissions click Save now.

The most important use cases for granting user permissions are collected at the use cases part of this article.

use cases

In this part of the article we'll provide a few ideas which use cases may exist and how and which permissions would be a good choice.

A new person in charge for administrating LimeSurvey will be added

  • login as admin
  • Create a new user account
  • Set global permissions for user to SuperAdministrator
  • not necessary: Setting the template permissions (SuperAdministrator has all permissions for all templates)
  • not necessary: Setting the survey permissions (SuperAdministrator has all permissions for all surveys)

A new user wants to create own surveys

  • login as admin or user with SuperAdministrator permission.
  • Create a new user account
  • Set global permissions for user to Create survey
  • Set template permissions for user to the template/s that should be used by the user/user-group
  • not necessary: Setting the survey permissions (The creator of a survey has all permissions for his/her surveys)

The creator of a survey needs another person to edit his/her survey

  • login as admin or user with SuperAdministrator permission.
  • Create a new user account
  • Set no global permissions for user
  • Set no template permissions for user
  • Set the survey permissions the way you want. It depends on what the new user should do and how much permissions he/she needs. If he/she should have all permissions for the survey you can select the first checkboxes in the first column with checkboxes (the one with the << or >> button as header).

A person responisble for the survey wants to see the results of the survey and export them

  • login as admin or user with SuperAdministrator permission.
  • Create a new user account
  • Set no global permissions for user
  • Set no template permissions for user
  • Set survey permissions to: Responses: View/read and export , Statistics: View/read


Article was translated and used with approval from vierundzwanzig (24/7 IT-SERVICES GmbH).



To be moved somewhere else once better defined:

There are several classes of possible people who access a LimeSurvey installation.  But only one set of people is actually termed a user in the code and documentation.  So lets understand what these classes of people are so we can better understand the terminology of the program.

Class Description
Installation Administrator Those people who create login user accounts to allow others to create, edit, activate and/or view surveys and their results.  Often can be given access to edit the templates, labelsets and other key features independent of any particular survey stored.
Survey Administrator A person with a login account that is given some management access to a particular survey.  Each survey can have its own set of users with specific rights to manipulate the survey.  These rights can be as broad as to activate a survey and possibly edit its question base.  They can be as minimum as simply able to review the results to date.
Participant Those people who simply respond or participate in taking a survey.  They may or may not have token access.  They do not need a login account to the administrative interface and thus are not termed users.
Installer A special class of person who has access to the MySQL (or similar) database server and possibly the command line interface of the computers operating system in order to install and configure the survey software.  This person is asked to setup the initial SuperAdmin user account from which other user login accounts can be created.
Developer An very special class of person who has access to the source code and can manipulate it to change the programs behavior.  Generally only done with versions of the survey that are not available for live, active surveys.

Use one time passwords

Since version 1.81 a user can call the limesurvey login at /limesurvey/admin and pass username and a one time password which was previously written into the users table (column one_time_pw) by an external application.

To enable this login method a setting has to be turned on ($use_one_time_passwords = true;) in config.php.

The URL has to contain the following variables:

  • user: The username normally used to login into Limesurvey. This username has to exist in the 'users' table of the database.
  • onepass: The plain text password which is then compared to the password in the 'users' table

A valid URL to login using a one time password will look like this:

Things to watch out for:

  • One time passwords have to be enabled by setting $use_one_time_passwords = true; in config.php
  • The passed username has to exist in Limesurvey's users table
  • The one time password, which can be set by an external application, has to be stored as MD5 hash in column one_time_pw of table users
  • The passed plain text password will be hashed using md5() function and will then be compared to the stored hash in column one_time_pw of table users. Both passwords have to match.
  • After the first login with the one time password this password is deleted from the database. The user won't be able to login with this password anymore. If you are confronted with session timeout problems raise the setting for $sessionlifetime (default is 3600 seconds).