Actions

Manage users/es: Difference between revisions

From LimeSurvey Manual

(Updating to match new version of source page)
(Updating to match new version of source page)
(2 intermediate revisions by the same user not shown)
Line 22: Line 22:
=Agregar un usuario=
=Agregar un usuario=


To create a new user, open the user management dialog by clicking on '''Configuration''' (located on the main LimeSurvey toolbar) -> '''Manage survey administrators''' as shown below.
<div class="mw-translate-fuzzy">
Abajo de la pantalla hay una linea con cajitas de texto que le dejan definir nuevos usuarios:
</div>




Line 30: Line 32:
Then, click on '''Add user''' located in the upper right area of '''User control''' table. A window will show up asking you to:
Then, click on '''Add user''' located in the upper right area of '''User control''' table. A window will show up asking you to:


* Enter the desired username into the '''Username''' text field.
<div class="mw-translate-fuzzy">
* Enter the email address into the '''Email''' text field. Please note that:
* '''Username''': El nombre de usuario con el que hará login.
** LimeSurvey sends out a confirmation email to the address entered into the '''Email''' field. This email address will be used as the standard contact email address for surveys created by the respective user.
* '''Email''': El email del usuario, usado para enviarle la contrase&ntilde;a y otra información administrativa.
** If you don't want the user to receive the confirmation email with a link to the LimeSurvey application, username, and password, you can use your own email address to send the confirmation email to you. After that, you can change the email address to the address of the user.
* '''Full Name''': El nombre completo del usuario, como aparecerá en otros lugares.
* Enter user's full name into the '''Full name''' text field. Please note that the full name entered here will be used as the standard contact person name for surveys created by the respective user.
 
* Click '''Save''' to create the new user.
al cliquear en el botón '''Add User''' el sistema genera automáticamente una contrase&ntilde;a para ese usuario.
</div>




Line 41: Line 44:




You have now created your first user. To find out more about [[Manage users#Set global permissions for a user|setting user permissions]], please read on.
<div class="mw-translate-fuzzy">
A menos que use 'Web server Authentication Delegation', el sistema le envía un email al usuario con toda la información necesaria para hacer login (URL de administración, nombre de usuario y contrase&ntilde;a).
 
Si el usuario no tiene email, debe volver atrás y cambiar a mano la contrase&ntilde;a; luego, obviamente, debe dársela al usuario.
</div>




Line 58: Line 65:
*set theme permissions for a user - by clicking the pen-and-lock symbol.
*set theme permissions for a user - by clicking the pen-and-lock symbol.


==Edit user==
<div class="mw-translate-fuzzy">
=Configurar los permisos de usuario=
</div>


You can use the pen symbol to edit a user.  
You can use the pen symbol to edit a user.  
Line 69: Line 78:
To delete a user account, simply click on his or her corresponding wastebin button (located on the same line as the user account you want to delete) and click '''OK'''.
To delete a user account, simply click on his or her corresponding wastebin button (located on the same line as the user account you want to delete) and click '''OK'''.


==Set global permissions for a user==
<div class="mw-translate-fuzzy">
=Configurar los permisos de usuario=
</div>


{{Alert|Global permissions apply to the whole LimeSurvey application. If you want to set permissions only for a specific survey, you can use the [[Manage users#Setting permissions for a single survey|survey permissions settings]].}}
{{Alert|Global permissions apply to the whole LimeSurvey application. If you want to set permissions only for a specific survey, you can use the [[Manage users#Setting permissions for a single survey|survey permissions settings]].}}
Line 83: Line 94:
<center>[[File:User_global_permission_complete.png]]</center>
<center>[[File:User_global_permission_complete.png]]</center>


You can now add or remove the following permissions:
<div class="mw-translate-fuzzy">
Para cada usuario, independientemente de la encuesta, puede tener estos permisos:
* Permisos de superadmin
* Crear encuestas
* Configurador
* Crear usuarios
* Borrar usuarios
* Administrar templates o plantillas
* Administrar label-sets/labels
</div>


* '''Participant panel''': For more details, continue reading about the [[Central Participant Database|central participant database here]].
* '''Participant panel''': For more details, continue reading about the [[Central Participant Database|central participant database here]].
Line 100: Line 120:
* '''Users''': A user can create, modify, and delete his own administration users with this permission. The newly created users cannot have higher permissions than the parent user. You will also not be able to edit users owned by other administration users. If this has to be done, then a Superadministrator permission has to be granted.
* '''Users''': A user can create, modify, and delete his own administration users with this permission. The newly created users cannot have higher permissions than the parent user. You will also not be able to edit users owned by other administration users. If this has to be done, then a Superadministrator permission has to be granted.


* '''Superadministrator''': This permissions can only be added or removed by the user called '''admin''' and grants full permission to the whole LimeSurvey application.
* '''Superadministrator''': This permissions can only be added by other Superadministrator with this setting as update and grants full permission to the whole LimeSurvey application.
{{Alert|title=Warning|text=This permissions is very powerful and you should be very careful with granting it.}}
{{Alert|title=Warning|text=This permissions is very powerful and you should be very careful with granting it.}}


*'''Use internal database authentication''': This permission allows users to access LimeSurvey's panel via the authentication page (e.g. ''http://domain/admin/authentication/sa/login''). If it is unchecked and the respective user tries to connect to LimeSuvey's panel, he will get the following error: 'Internal database authentication method is not allowed for this user'.
*'''Use internal database authentication''': This permission allows users to access LimeSurvey's panel via the authentication page (e.g. ''http://domain/admin/authentication/sa/login''). If it is unchecked and the respective user tries to connect to LimeSuvey's panel, he will get the following error: 'Internal database authentication method is not allowed for this user'.
{{Note|All the permissions mentioned above that belong to the [[Optional_settings#Security|forced super administrator]] cannot be removed via the GUI.}}


==Set theme permissions for a user==
==Set theme permissions for a user==
Line 145: Line 168:
* My local LS system can't test the permissions with different accounts (my email password does not have a way to be connected).
* My local LS system can't test the permissions with different accounts (my email password does not have a way to be connected).


=Set permissions for a single survey=
<div class="mw-translate-fuzzy">
==Permiso de configurador==
</div>
 
<div class="mw-translate-fuzzy">
Este permiso determina si el usuario puede ejecutar las siguientes acciones:
*Chequear la integridad de los datos
*Hacer backups o resguardos de la base de datos
*Acceder a la información de phpinfo en la pantalla de ''overview summary''
</div>


These permissions only apply for a single survey. If you want to set permissions for the whole system, you can use [[Manage users#Set global permissions for a user|global permissions]].
These permissions can be offered either to a single user or to a user group.


{{Alert|title=Attention|text=An existing user account is required to set permissions for a single survey. If the account doesn't exist, you have to create it first and then change the survey permissions. The same applies to offering survey permissions to a user group. Besides the necessity to have one created, you also need to add at least one user to that group in order to be able to select it and grant it survey permissions.}}
{{Alert|title=Attention|text=An existing user account is required to set permissions for a single survey. If the account doesn't exist, you have to create it first and then change the survey permissions. The same applies to offering survey permissions to a user group. Besides the necessity to have one created, you also need to add at least one user to that group in order to be able to select it and grant it survey permissions.}}
{{Note| By default, an user (non-admin) cannot grant survey permissions to users that are not part of the same group as the survey administrator. This is a security option enabled by '''default''' in LimeSurvey. To change this, you need to deactivate option [[Global_settings#Security|Group member can only see own group]], located in the '''Global settings''', under the '''Security tab'''. However, if you feel unsure about disabling this option, you can create groups containing those users that can be seen and be granted survey permissions by a survey creator.}}


To change the survey permissions, you have to select the '''Settings''' sidebar of your survey. Then, click on '''Survey permissions''' and choose to whom would you like to offer permissions. The rights can be offered either separately to specific users or to a user group.
To change the survey permissions, you have to select the '''Settings''' sidebar of your survey. Then, click on '''Survey permissions''' and choose to whom would you like to offer permissions. The rights can be offered either separately to specific users or to a user group.
Line 198: Line 232:
{{Note|[[Manage user groups|The user group function]] is still experimental. Use our [https://bugs.limesurvey.org/ bugs tracker] to describe any kind of inconsistencies.}}
{{Note|[[Manage user groups|The user group function]] is still experimental. Use our [https://bugs.limesurvey.org/ bugs tracker] to describe any kind of inconsistencies.}}


=Examples=
<div class="mw-translate-fuzzy">
==Permiso para crear/borrar usuarios==
</div>


Different scenarios are presented below. They provide some advice about which rights are necessary for some specific tasks and how they can be granted to the users.
<div class="mw-translate-fuzzy">
Se le puede dar a un usuario el permiso para crear otros usuarios. En este caso, podran darle a los nuevos usuarios, como mucho, los permisos que ellos mismos tienen, pero no más.
 
En el caso de que un usuario requiera mayores permisos que su 'padre', el primer superadmin deberá 'adoptar' a este usuario haciendo click en 'Take Ownership', en la linea que describe al usuario.
 
Sólo entonces el administrador podrá darle al usuario los permisos requeridos.
 
Por otro lado, un usuario puede tener permisos para borrar los usuarios que ha creado.
</div>




Line 217: Line 261:
* ''Optional'' : Set theme permissions - select which theme(s) should be used by the user/user group.
* ''Optional'' : Set theme permissions - select which theme(s) should be used by the user/user group.


==The creator of a survey needs another person to edit his/her survey==
<div class="mw-translate-fuzzy">
* Log in as '''admin''' (or as a user that has the '''Superadministrator''' permission).
==Permisos de superadmin==
* Create a new user account.
 
* Set '''no global permissions''' for user.
Un usuario con SuperAdmin tiene el permiso de administrar todos los objetos del sistema (encuestas, preguntas, plantillas, etiquetas, usuarios).
* Set '''no theme permissions''' for user.
 
* Set the survey permissions the way you want. If he/she should receive all the survey permissions, you can check the first box from each row. Otherwise, click on the double-right arrowhead to see the expanded matrix (upper right corner) and select only those rights you believe the respective user should have.
Sin embargo, sólo el primer superadmin (el configurado durante la instalación), puede dar este privilegio a otros usuarios.
</div>
 
 
<div class="mw-translate-fuzzy">
==Permisos sobre templates o plantillas==
 
El botón 'Set Template Rights' permite especificar qué plantilla puede usar un usuario en sus encuestas. La plantilla 'default' siempre está accesible para todos los usuarios.
 
NOTA: Aquí estamos hablando del permiso para usar la plantilla, y NO para modificarla.


==Permisos sobre Labelset==


==A person responsible for the survey wants to see the results of the survey and export them==
Este permiso habilita a los usuarios a editar los labelsets globales a todas las encuestas.
* Log in as '''admin''' (or as a user that has the '''Superadministrator''' permission).
</div>
* Create a new user account.
* Set '''no global permissions''' for user.
* Set '''no theme permissions''' for user.
* Set survey permissions to: '''Responses''' -> '''View/read''' and '''export''', and '''Statistics''': '''View/read'''.





Revision as of 15:50, 8 November 2018

Translation of this page is incomplete.

General

Al hacer click en el ícono se abre la ventana para el manejo de usuarios. Dependiendo de los permisos que tenga asignados, podrá cambiar su contraseña o manipular otras cuentas de usuarios cambiando sus privilegios.

En este contexto, el término usuario se refiere a un alguien  que puede hacer login a la interface de administración de encuestas

Si quiere darle a un usuario acceso limitado a una encuesta,

The user management tool allows you to add additional administration users to LimeSurvey. We will just call them 'users' in this chapter. Do not confuse them with survey participants (respondents).


Agregar un usuario

Abajo de la pantalla hay una linea con cajitas de texto que le dejan definir nuevos usuarios:


File:LimeSurveyBenuzerVerwaltung.jpg


Then, click on Add user located in the upper right area of User control table. A window will show up asking you to:

  • Username: El nombre de usuario con el que hará login.
  • Email: El email del usuario, usado para enviarle la contraseña y otra información administrativa.
  • Full Name: El nombre completo del usuario, como aparecerá en otros lugares.

al cliquear en el botón Add User el sistema genera automáticamente una contraseña para ese usuario.



A menos que use 'Web server Authentication Delegation', el sistema le envía un email al usuario con toda la información necesaria para hacer login (URL de administración, nombre de usuario y contraseña).

Si el usuario no tiene email, debe volver atrás y cambiar a mano la contraseña; luego, obviamente, debe dársela al usuario.



As you can see below, there are four options under the Action column that allow you to:



  • edit the general aspects of a user - by clicking the pen symbol.
  • delete the user from the survey administrators database - by clicking the wastebin button.
  • set global permissions for a user - by clicking the lock symbol.
  • set theme permissions for a user - by clicking the pen-and-lock symbol.

Configurar los permisos de usuario

You can use the pen symbol to edit a user.

You can set a new email address, full name, and even change his or her password. If you have finished what you want to do, click on the Save button (right upper part of the window).


Delete user

To delete a user account, simply click on his or her corresponding wastebin button (located on the same line as the user account you want to delete) and click OK.

Configurar los permisos de usuario

  Global permissions apply to the whole LimeSurvey application. If you want to set permissions only for a specific survey, you can use the survey permissions settings.


To set global permissions for a user, click on the lock symbol.



The CRUD (create, read, update, and delete) system is employed (like in the survey permission settings). To fine-tune user permissions, we strongly recommend to extend the matrix using the double-right arrowhead, which is located in its upper right corner. If you check the first box, all the CRUD permissions in that row are automatically checked.

Para cada usuario, independientemente de la encuesta, puede tener estos permisos:

  • Permisos de superadmin
  • Crear encuestas
  • Configurador
  • Crear usuarios
  • Borrar usuarios
  • Administrar templates o plantillas
  • Administrar label-sets/labels
  • Label sets: Permission to create, view, update, delete, export, and import label sets. The label sets don't have specific permissions (unlike themes).
  • Settings & Plugins: With this permission a user can check data integrity, save the SQL database to an .sql file, manage global settings, view the PHP info in the global settings, and manage all plugins.
  • Surveys: Gives access to all surveys. To allow a user to only create and manage their own survey, give the user the 'create' permission. A creator of a survey is the owner of the survey and will always be able to manage it. Remember that each survey can grant different permissions .
The global permission is applied before the survey-specific permission!
  • Themes: It allows the user to use all the available design themes and edit all non-standard themes. A person with this right should have sufficient knowledge in terms of HTML, Javascript, and CSS. If a user is not familiar with these things and is supposed to use a specific design themes, it would be better to only give him 'read' permission. Each theme can have specific permissions.
  • User groups: This permission allows a user to create/view/update/delete user groups.
  • Users: A user can create, modify, and delete his own administration users with this permission. The newly created users cannot have higher permissions than the parent user. You will also not be able to edit users owned by other administration users. If this has to be done, then a Superadministrator permission has to be granted.
  • Superadministrator: This permissions can only be added by other Superadministrator with this setting as update and grants full permission to the whole LimeSurvey application.
  Warning : This permissions is very powerful and you should be very careful with granting it.


  • Use internal database authentication: This permission allows users to access LimeSurvey's panel via the authentication page (e.g. http://domain/admin/authentication/sa/login). If it is unchecked and the respective user tries to connect to LimeSuvey's panel, he will get the following error: 'Internal database authentication method is not allowed for this user'.
All the permissions mentioned above that belong to the forced super administrator cannot be removed via the GUI.


Set theme permissions for a user

With theme permissions, you can decide which design themes a user can select when creating or editing a survey. It might be a good idea to restrict the design themes a user can select in order to prevent unwanted use of design themes, which you might consider to not be suitable for a survey/questionnaire.

For example, if you have a specific design themes for a group of users or customers, you might want to restrict their access to other themes to only make them use the themes created for their purpose.

To set or edit the themes permissions for a user, simply click the pen-and-lock symbol for design themes:



Select the design themes to which the respective user or user groups should have access. After you finished your selection or deselection, do not forget to hit the Save button: 0.75px.

To get a proper understanding of this function, check the examples provided below.

Use one-time passwords

A user can call the LimeSurvey login at /limesurvey/admin and enter a username and a one-time password (which was previously written into the users table - column one_time_pw - by an external application).

To enable this login method, the line $use_one_time_passwords = false; has to be set 'true' in config.php (it is 'false' by default) .

The URL has to contain the following variables:

  • user: The username normally used to login into LimeSurvey. This username has to exist in the 'users' table of the database.
  • onepass: The plain text password which is then compared to the password in the 'users' table

A valid URL to login using a one-time password will look like this:

The 'secretpassword' field is plain text, not MD5 code.

Things to watch out for:

  • To enable this login method, the line $use_one_time_passwords = false; has to be set true in config.php (it is 'false' by default).
  • The passed username has to exist in LimeSurvey's users table.
  • The one-time password (which can be set via an external application) has to be stored as MD5 hash in column one_time_pw of table users.
  • (This should be ignored except "Both passwords have to match") The passed plain text password will be hashed using the sha256 function and will then be compared to the stored hash in column one_time_pw of table users. Both passwords have to match.
  • After the first login with the one-time password, it gets deleted from the database. The user won't be able to log in anymore with that respective password a second time.
  • My local LS system can't test the permissions with different accounts (my email password does not have a way to be connected).

Permiso de configurador

Este permiso determina si el usuario puede ejecutar las siguientes acciones:

  • Chequear la integridad de los datos
  • Hacer backups o resguardos de la base de datos
  • Acceder a la información de phpinfo en la pantalla de overview summary


  Attention : An existing user account is required to set permissions for a single survey. If the account doesn't exist, you have to create it first and then change the survey permissions. The same applies to offering survey permissions to a user group. Besides the necessity to have one created, you also need to add at least one user to that group in order to be able to select it and grant it survey permissions.



By default, an user (non-admin) cannot grant survey permissions to users that are not part of the same group as the survey administrator. This is a security option enabled by default in LimeSurvey. To change this, you need to deactivate option Group member can only see own group, located in the Global settings, under the Security tab. However, if you feel unsure about disabling this option, you can create groups containing those users that can be seen and be granted survey permissions by a survey creator.


To change the survey permissions, you have to select the Settings sidebar of your survey. Then, click on Survey permissions and choose to whom would you like to offer permissions. The rights can be offered either separately to specific users or to a user group.




Grant survey permissions to a user

In the next step, select the user that will receive survey rights and click Add user.



After you click Set survey permissions, the user's survey permissions matrix will be shown.

You can set in this matrix the user's survey permissions. Checking a box grants survey permissions to the respective user. If you click on a checkbox from the first column, all the rights of the corresponding line will be selected/removed.

Click on the double-right arrowhead to access the extended version of the matrix to choose specifically the actions that can be performed by a user. After you finished editing the survey permissions, click on the Save button, which is located in the upper right corner of the screen.

Some examples are provided below in order to help you get a better understanding of Limesurvey's survey permissions system.

Grant survey permissions to a user group

Click on add a user group and select the user group to which you would like to add the permission rights.

In the next step, select the permissions that you will allocate to the members of that user group. Do not forget to click on the double right arrowhead to get an extended view of the permissions matrix.



After you finished editing the survey permissions, click on the Save button, which is located in the upper right part of the screen.

Some examples are provided below in order to help you get a better understanding of the Limesurvey's survey permissions system.

The user group function is still experimental. Use our bugs tracker to describe any kind of inconsistencies.

Permiso para crear/borrar usuarios

Se le puede dar a un usuario el permiso para crear otros usuarios. En este caso, podran darle a los nuevos usuarios, como mucho, los permisos que ellos mismos tienen, pero no más.

En el caso de que un usuario requiera mayores permisos que su 'padre', el primer superadmin deberá 'adoptar' a este usuario haciendo click en 'Take Ownership', en la linea que describe al usuario.

Sólo entonces el administrador podrá darle al usuario los permisos requeridos.

Por otro lado, un usuario puede tener permisos para borrar los usuarios que ha creado.


I want to add a new person in charge for administrating LimeSurvey

  • Log in as admin.
  • Create a new user account.
  • Grant that user the Superadministrator permission.
  • Not necessary : Setting the theme permissions (Superadministrator has all permissions for all themes).
  • Not necessary : Setting the survey permissions (Superadministrator has all permissions for all surveys).


A new user wants to create his/her own surveys

  • Log in as admin (or as a user that has the Superadministrator permission).
  • Create a new user account.
  • Set global permissions for that user to Create survey.
  • Optional : Set theme permissions - select which theme(s) should be used by the user/user group.

Permisos de superadmin

Un usuario con SuperAdmin tiene el permiso de administrar todos los objetos del sistema (encuestas, preguntas, plantillas, etiquetas, usuarios).

Sin embargo, sólo el primer superadmin (el configurado durante la instalación), puede dar este privilegio a otros usuarios.


Permisos sobre templates o plantillas

El botón 'Set Template Rights' permite especificar qué plantilla puede usar un usuario en sus encuestas. La plantilla 'default' siempre está accesible para todos los usuarios.

NOTA: Aquí estamos hablando del permiso para usar la plantilla, y NO para modificarla.

Permisos sobre Labelset

Este permiso habilita a los usuarios a editar los labelsets globales a todas las encuestas.


I need help from two interns that can help me with the translation of my survey

  • Log in as admin (or as a user that has the Superadministrator permission).
  • Create n user accounts (where n is the number of translators).
  • Create a user group called Translators and add the n accounts to this group.
  • Go to the Survey permissions and click on Add a user group.
  • If they only do translations, then offer them the Quick translation permission.
Check our wiki section on users and their classification as it can be found in the code and documentation.