{% extends "admin_base.html" %} {% block copyright %} {% endblock %} {% set body_id = 'group_list' %} {% set page_heading = 'Groups' %} {% block body %} {{ super() }}
{{ groups|length }} group{{ groups|length|pluralize }} {% if is_permitted(SystemPermission.PERMIT_ADMIN_PERMISSIONS) %} (add a new group) {% endif %}

Groups are used for image access control and the granting of permissions to users. This is achieved in 2 ways. Firstly, each group contains a number of optional check boxes that grant its members the ability to use certain system or administration functions. Secondly, the ability to control whether images can be viewed, uploaded, changed or deleted, is controlled by setting an access level in the folder permissions area for an image folder and group pair. Note that if you grant the files and folders administration permission to a group, this overrides the normal folder permissions and allows full access to all files and folders.

There are 3 built-in groups that cannot be deleted (though you can rename them and change them if you wish). The Administrators group is pre-configured to grant full system access to its members. Only an existing administrator can make another user a member of Administrators. The Normal Users group acts as a standard group that every internal user belongs to. When a new user account is created it is automatically added into Normal Users. Lastly the Public group is a virtual group that represents anonymous users - those who are not logged in to the image server. The Public group does not have a list of members and does not provide any system permissions (they are all set to deny). However the Public group plays a very important role in setting the folder permissions, where it is used to control whether or not images are visible to the public.

{% set row_class = cycler('even', 'odd') %} {% for group in groups %} {% set edit_url = url_for('admin.group_edit', group_id=group.id, embed=1) %} {% endfor %}
Name Description Action
{{ group.name }} {{ group.description }} {% if is_permitted(SystemPermission.PERMIT_ADMIN_PERMISSIONS) and group.group_type != GROUP_TYPE_SYSTEM %}
(delete)
{% endif %}
{% endblock %}