Difference between revisions of "User Access Management"

Revision as of 14:36, 3 April 2013

Since Charitylog is based online, and the whole organisation has access to the information stored on it, it is important that user access is well controlled.

We suggest that it is a good idea to be as lenient with access as possible, and to trust staff as much as possible. If you try to tightly control every single user with a set of complicated rules about what they can and can't see, it is likely to lead to an awful lot of extra work for administrators. However, there is plenty of control if you need it. Ultimately the degree to which you control access is entirely up to you.

There are three ways to limit user access within Charitylog.

Limiting access for particular users

Click on the "Users" link in the "User Settings" submenu (Administration > Security > User Settings > Users).

File:A access 1.png

This will show you the list of users on your system. Click on the name of a user to edit their individual settings. Across the top of the resulting screen are three tabs which contain the settings around what this user can see and do.

File:A access 2.png

System Access tab

This tab contains general, system-wide preferences, as follows.

Allowed to Merge Records?

If set to "Yes", this user will be allowed to merge organisations and people together, as you might need to when a client is entered onto the system twice.

If allowed, the user will see a "Merge Records" link at the bottom of the Client Details screen.

File:A access 3.png

Allowed to Enter Project Sub-categories?

This preference sets whether or not the user will be able to categorise referrals using Project Subcategories on the Record a Contact screen.

If allowed, the user will see a drop-down list on the Record a Contact screen, as shown.

File:A access 4.png

Allowed to Delete Uploaded Documents?

This allows users to delete documents that are uploaded to the Client Details screen.

If allowed, the user will see a "Delete" button on the Uploaded Documents page, as shown.

File:A access 5.png

Allowed to Delete Next of Kin Records?

This allows users to delete NoK records from the link on the Client Details screen.

If allowed, the user will see a "Delete" button on the Next of Kin & Contacts page, as shown.

File:A access 5.png

Allowed to Delete Extension Database Records?

This allows users to delete extension database records. See this page for further explanation of what Extension Databases are and what they can do.

If allowed, the user will see a "Delete Record" button on Extension Database records.

File:A access 6.png

Allowed to Create Private Notes?

This allows users to create Private Notes linked to the Client Details screen. For more information on Private Notes, please see this page: Private Notes.

If allowed, users will see a "Private Notes" link at the bottom of the Client Details screen, as shown.

File:A access 7.png

Allowed to Log In at Weekends?

If set to "No", this will stop users logging into the system at weekends.

Earliest and Latest Log In Time Allowed

These time fields can be used to govern the times that this user can log in to the system. Leave both set to "00:00" to allow unrestricted access.

Allowed To Use Favourites?

This setting allows the user to use Favourites.

Copy Favourites from Another User, and Copy Access Rights from Another User

These allow you to "bring in" Favourites and Access Rights from a user that is already set up. This is useful when setting up new users.

Project Access tab

Personal Tab Access tab

Limiting access by user group

Group Access screen

The Group Access screen allows administrators to control what each User Group has access to throughout the Charitylog system. It is one of the most powerful tools that administrators have in running the system, and is covered in its own document here: Group Access.

Limiting access to a specific document, etc

Uploaded documents

Private Notes

Extension Databases