This document will explain the difference between ERP5, Zope and Developer users
and how to create Zope and Developer users. It does not cover
creating ERP5 Users and setting access permissions for ERP5 users.
${table_of_content}
Standard ERP5 Users
ERP5 users are created in the person_module, either by hand (How to create Persons in ERP5)
or when using the ERP5 configurator. ERP5 users are day-to-day users working with
the data stored in ERP5. They have access permissions defined limiting the areas
in ERP5 they can use and the actions available.
ERP5 User Access Permissions
ERP5 user viewing permissions are defined through assignments. ERP5 allows to define
security on an assignment-basis using parameters like group, role, function and activity.
This way a person may have access to all documents related to a project including
the rights to read, write and delete objects, while another assignment for a
different project will only allow him to read documents.
Zope Users
Zope users (like the default user created when instantiating a new ERP5 instance)
have access the Zope interface which ERP5 is built upon. This means
Zope users can work with data stored in ERP5 but also develop within ERP5,
creating new views, forms, action and, workflows etc. Note not all
actions may be available to zope users on some portal types.
Adding Zope Users Using the ACL Interface
The main Zope Interface can be accessed when logged in as zope user by appending
/manage_main
to the url. Find the folder called acl-users.
The acl-users section allows to assign roles to zope-users. You will have to
search a user by username, then click on the "?" of the role you want to assign
to this zope user and then add the respective user.
Note, that the manager role is a custom role with permissions superceeding
all 5A security roles and that it is good practice to NOT work with the initial zope
user. You should create your own zope user and logout and log back in with
this created user to work in zope. It is even better practice to try and use
a default ERP5 user account when not having to work with the ERP5 Zope interface
itself.
Developer Users
The developer user has more rights than the ERP5 and Zope users. Developer users
can work on the core level of ERP5. Therefore their access rights cannot be set
through ERP5 or the Zope interface. To enable developer access you have to go through the
Webrunner interface.
Adding Developer User Using Instantiation Parameters
The quick way to add a developer user is to open the parameter tab,
add a new parameter with key_
and value {"developer-list": ["your_zope_user_name"]}
.
Click update values and run "Play" (green button) to re-instantiate your
ERP5 instance.
${related_subject_list}