1,211
edits
Changes
Template:Networking rutos manual users (view source)
Revision as of 17:43, 21 November 2022
, 17:43, 21 November 2022→Users
{{Template:Networking_rutos_manual_fw_disclosure
{{Template: Networking_rutos_manual_fw_disclosure
| fw_version = {{{series}}}_R_00.02.04.3
| fw_version ={{Template: Networking_rutos_manual_latest_fw
| series = {{{series}}}
| series = {{{series}}}
| name = {{{name}}}
}}
}}
}}
==Summary==
==Change Password==
The <b>Users</b> window is used to add new user accounts that can access the device with different user credentials than the default ones. The newly added users can be assigned to one of two groups, either of which can be modified to limit WebUI read/write access rights for users belonging to each specific group.
The <b>Change Password</b> page is used to change the password of the current user.
[[File:Networking_rutos_users_change_password.png|border|class=tlt-border]]
==Users Management==
===Summary===
----
The <b>Users Management</b> page is used to add new user accounts that can access the device with different user credentials than the default ones. The newly added users can be assigned to one of two groups, either of which can be modified to limit WebUI read/write access rights for users belonging to each specific group.
<b>This page is unrelated to SSH users.</b> By default, there is one SSH user named "root" and it shares the same password as the default WebUI user named "admin".
<b>This page is unrelated to SSH users.</b> By default, there is one SSH user named "root" and it shares the same password as the default WebUI user named "admin".
}}
}}
==Groups==
===Groups===
----
The <b>Groups</b> section lists available user groups of which there are three:
The <b>Groups</b> section lists available user groups of which there are three:
[[File:Networking_rutx_users_groups_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_users_groups_v1.png|border|class=tlt-border]]
----
----
<ul>
<ul>
<li>additional users cannot be added to this group;</li>
<li>additional users cannot be added to this group;</li>
<li>access rights for this group cannot be modified.</li>
<li>access rights for this group cannot be modified.</li>
</ul><br>[[File:Networking_device_manual_users_root_visualization_v2.png]]
</ul><br>[[File:Networking_rutos_manual_users_root_visualization.png]]
</li>
</li>
----
----
<li>unlimited write access by default;</li>
<li>unlimited write access by default;</li>
<li>access rights can be modified.</li>
<li>access rights can be modified.</li>
</ul><br>[[File:Networking_device_manual_users_admin_visualization_v2.png]]
</ul><br>[[File:Networking_rutos_manual_users_admin_visualization.png]]
</li>
</li>
----
----
<li>limited read access; by default, users belonging to this group cannot view these pages:
<li>limited read access; by default, users belonging to this group cannot view these pages:
<ul>
<ul>
<li>Services → Mobile Utilities → Messages → [[{{{name}}} Mobile_Utilities#Send_Messages|Send Messages]];</li>
{{#ifeq:{{{mobile}}}|0||<li>Services → Mobile Utilities → Messages → [[{{{name}}} Mobile_Utilities#Send_Messages|Send Messages]];</li>}}
<li>System → [[{{{name}}} Users|Users]];</li>
<li>System → [[{{{name}}} Users|Users]];</li>
<li>System → [[{{{name}}} Firmware|Firmware]];</li>
<li>System → [[{{{name}}} Firmware|Firmware]];</li>
</li>
</li>
<li>access rights can be modified.</li>
<li>access rights can be modified.</li>
</ul><br>[[File:Networking_device_manual_users_user_visualization_v2.png]]
</ul><br>[[File:Networking_rutos_manual_users_user_visualization.png]]
</li>
</li>
</ul>
</ul>
<b>Additional note</b>: you can view and/or edit settings for each group by clicking the 'Edit' button next to them. More on information on how to edit group access settings is located in the following section of this manual page.
<b>Additional note</b>: you can view and/or edit settings for each group by clicking the 'Edit' button next to them. More on information on how to edit group access settings is located in the following section of this manual page.
===Group Settings (edit group)===
====Group Settings (edit group)====
----
----
A group's parameters can be set in its <b>Group Settings</b> page. To access the Groups Settings page, click the 'Edit' button next to the group's name. Below is an example of the Group Settings section:
A group's parameters can be set in its <b>Group Settings</b> page. To access the Groups Settings page, click the 'Edit' button next to the group's name. Below is an example of the Group Settings section:
[[File:Networking_rutx09_users_groups_user_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_users_groups_group_settings_v1.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
<tr>
<tr>
<tr>
<tr>
<td>Write action</td>
<td>Write action</td>
<td>Allow | Deny; default: <b>Deny</b></td>
<td>Allow | Deny; default: <b>Allow</b></td>
<td>Specifies whether to allow or deny write actions for users in the group. Write actions consist of changing configurations and performing certain actions (such as clicking buttons).<br>This field directly correlates with the "Write access" field below it, because the selected write action will apply to pages specified in that field.</td>
<td>Specifies whether to allow or deny write actions for users in the group. Write actions consist of changing configurations and performing certain actions (such as clicking buttons).<br>This field directly correlates with the "Write access" field below it, because the selected write action will apply to pages specified in that field.</td>
</tr>
</tr>
<tr>
<tr>
<td>Write access</td>
<td>Write access</td>
<td>path(s) to page(s); default: <b>*</b></td>
<td>path(s) to page(s); default: <b>
<ul>
<li><b>system/multiusers/change_password</b></li>
</ul>
</b></td>
<td>Path(s) to the page(s) to which the selected "Write action" will be applied. Click the plus symbol to add multiple entries.</td>
<td>Path(s) to the page(s) to which the selected "Write action" will be applied. Click the plus symbol to add multiple entries.</td>
</tr>
</tr>
<td>path(s) to page(s); default: <b>
<td>path(s) to page(s); default: <b>
<ul>
<ul>
<li><b>admin/services/mobile_utilities/sms/send</b></li>
<li><b>services/mobile_utilities/sms/send</b></li>
<li><b>admin/system/multiusers/*</b></li>
<li><b>services/packages</b></li>
<li><b>admin/system/flashops/*</b></li>
<li><b>system/multiusers/</b></li>
<li><b>admin/system/reboot</b></li>
<li><b>system/flashops/</b></li>
<li><b>admin/system/backup</b></li>
<li><b>system/backup</b></li>
<li><b>admin/system/admin/access_control</b></li>
<li><b>system/admin/access_control</b></li>
<li><b>admin/services/cli</b></li>
<li><b>system/cli</b></li>
<li><b>system/uscripts</b></li>
<li><b>admin/system/uscripts</b></li>
<li><b>system/wizard</b></li>
<li><b>admin/services/packages/upload</b></li>
<li><b>services/packages/upload</b></li>
<li><b>admin/network/*</b></li>
<li><b>network/</b></li>
{{#ifeq:{{{wifi}}}|1|<li><b>services/hotspot/general/userscripts</b></li>}}
</ul>
</ul>
</td>
</td>
<td>Path(s) to the page(s) to which the selected "Read action" will be applied. Click the plus symbol to add multiple entries.</td>
<td>Path(s) to the page(s) to which the selected "Read action" will be applied. Click the plus symbol to add more entries.</td>
</tr>
</tr>
</table>
</table>
====Examples====
=====Examples=====
----
----
The easiest way to master the syntax is to navigate to page that you want to generate a path for and the copy the path from the URL of that page.
The easiest way to master the syntax is to navigate to page that you want to generate a path for and the copy the path from the URL of that page.
For example, to specify the path to the Services → VPN page, navigate to the page, copy the page's URL address <b>starting from the word "admin"</b> and paste it into one of the access fields:
For example, to specify the path to the Network → Mobile page, navigate to the page, copy the page's URL address <b>starting from the symbol "#"</b> and paste it into one of the access fields:
[[File:Networking_rutx_users_groups_example_url_bar_v3.png]]
[[File:Networking_rutos_users_groups_example_url_bar_v1.png]]
----
----
However, the VPN window contains links to many different types of VPN pages. If you want to specify only one of them, you can do it as well. For example, to to specify the path to the IPsec page, <b>add "/ipsec" to the path string</b>:
However, the VPN window contains links to many different types of VPN pages. If you want to specify only one of them, you can do it as well. For example, to to specify the path to the IPsec page, <b>add "/ipsec" to the path string</b>:
services/vpn<b>/ipsec</b>
----
----
An <b>asterisk (*)</b> in the path string means that the every page from that point on is included in that path. For example, to generate a path that includes pages in the Services menu tab:
An <b>asterisk (*)</b> in the path string means that the every page from that point on is included in that path. For example, to generate a path that includes pages in the Services menu tab:
services/<b>*</b>
Or to simply include everything in the entire WebUI (<b>if this path is combined with <i>Read action: Deny</i>, users from that group will not be able to login to the WebUI</b>):
Or to simply include everything in the entire WebUI (<b>if this path is combined with <i>Read action: Deny</i>, users from that group will not be able to login to the WebUI</b>):
<b>*</b>
<b>*</b>
==Users==
===Users===
----
The <b>Users</b> section lists all created users and provides the possibility to change their passwords and the group they belong to (with the exception of the default user "admin" which always belongs to the <i>root</i> group).
The <b>Users</b> section lists all created users and provides the possibility to change their passwords and the group they belong to (with the exception of the default user "admin" which always belongs to the <i>root</i> group).
By default, there is only one user called "admin":
By default, there is only one user called "admin":
[[File:Networking_rutx_users_users_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_users_users_v2.png|border|class=tlt-border]]
===User Settings (edit user)===
====User Settings (edit user)====
----
----
Each user's password and group parameters can be set in their <b>User Settings</b> pages. To access the User Settings page, click the 'Edit' button next to the user's name.
Each user's password and group parameters can be set in their <b>User Settings</b> pages. To access the User Settings page, click the 'Edit' button next to the user's name.
<u>However</u>, you may want to add a new user at first. This can be done from the [[{{{name}}}_Users#Add_New_User|Add New User]] section below:
<u>However</u>, you may want to add a new user at first. This can be done from the [[{{{name}}}_Users#Add_New_User|Add New User]] section below:
[[File:Networking_rutx_users_users_add_new_user_example_v2.png]]
[[File:Networking_rutos_users_add_new_user_example.png]]
<ol>
<ol>
Below is an example of a newly added user's settings page:
Below is an example of a newly added user's settings page:
[[File:Networking_rutx_users_users_edit_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_users_user_settings.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
<td>string; default: <b>none</b></td>
<td>string; default: <b>none</b></td>
<td>Displays the user's name.</td>
<td>Displays the user's name.</td>
</tr>
</tr>
<tr>
<tr>
</table>
</table>
==Add New User==
===Add New User===
----
The <b>Add New User</b> section is used to create additional users that can access the WebUI. After a new user is added, it will appear in the [[{{{name}}} Users#Users|Users]] section.
The <b>Add New User</b> section is used to create additional users that can access the WebUI. After a new user is added, it will appear in the [[{{{name}}} Users#Users|Users]] section.
[[File:Networking_rutx_users_users_add_new_user_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_users_add_new_user.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
