DOCS

Managing Users

A user corresponds to the username that is required (along with a password) for logging into becubic Web or configuring a connection to the repository in the becubic Eclipse client. A becubic user’s access rights are the same for all types of connections (for example, direct access to the repository, three-tier access, or access from the Web).

becubic is initialized with a Default Domain that includes these users:

User Description

superuser

This is the user with unlimited permissions, and the only one allowed to create domains. When a repository is created in Model Wizard (see the ASG-becubic Installation and Implementation Guide), a superuser connection is automatically created. The initial password for superuser is SuperUser.

When creating a new repository, you are prompted to specify a password for this built-in user in the Model Wizard. See the ASG-becubic Installation and Implementation Guide for information about creating new projects.

guest

This is a user with read-only rights. The initial password for guest is guest.

integration

The only function of this user is to connect to a repository through Ant-based tools during a redocumentation sequence. The initial password for integration is integration.

QueryAsService

This user can access becubic queries as a Web service and view the corresponding results, without passing through becubic Web. No other becubic feature is available to this user. The initial password for QueryAsService is QueryAsService.

startupuser

This is the default standard user with read/write rights but does not have administrator rights. The initial password for startupuser is asg.

When creating a new repository, you are prompted to specify a password for this built-in user in the Model Wizard. See the ASG-becubic Installation and Implementation Guide for information about creating new projects.

Survey

The only function of this user is to establish an anonymous connection to the Survey page of becubic Web. The initial password for Survey is Survey.

Each user will have these properties:

Property Description

Username

A unique username that identifies each user within a domain. Users in different domains can have the same username.

Within a domain configured for Single Sign-on (SSO) authentication, all the roles corresponding to the LDAP/CAS groups that an authenticated user belongs to will be created automatically when this user connects. To manage permissions of SSO-authenticated users, edit these roles by allowing or denying permissions or create specific roles and make the automatically created roles inherit the permissions from them. See Single Sign-on Settings.

Within a domain configured for SSO authentication, users must be declared in the LDAP/CAS directory. becubic users are automatically created at each successful authentication.

Password

Each username is protected by a connection password. The password can be changed on the Edit User window.

Within a domain configured for SSO authentication, the user password is the one that is defined in the LDAP/CAS directory. As a result, you cannot edit this password in becubic.

Associated Role

A user can have one or more associated roles and inherit other roles through a hierarchy of roles.

Associated Welcome Panel

A Welcome Panel is a list of queries and other objects (for example, documents, object sets, or URL links), which is displayed in a tree structure in the left frame of the Panel Navigation view (see the ASG-becubic Web Client User’s Guide). If a user has multiple Welcome Panels, either associated with the user’s definition or inherited from roles, the contents of all the Welcome Panels display in a single panel.

When a user with no Welcome Panel logs in, the Default Welcome Panel displays.

See Creating a User, Editing a User, and Deleting Users within the Security Management Procedures section for procedures to perform the various user and security management tasks.