This section is intended to users management. It offers features in dependence of user's permissions. i.e. User may enter this section, but cannot modify anything. Or user may modify, but cannot create new users.
All possible features of users section:
create new user
modify basic data
change password
disable/enable user
assign user to groups - Assignment to groups gives user proper permissions
Table 4.1. After default installation above empty DB, there are two users created
| User name | Description |
|---|---|
| clover | Clover user has admin permissions, thus default password "clover" should be changed after installation. |
| system | System user is used by application instead of common user, when no other user can be used. i.e. when security is globally switched off. This user cannot be removed and it is impossible to login as this user. |
Table 4.2. User attributes
| Attribute | Description |
|---|---|
| username | Common user identifier. Must be unique, cannot contain spaces or special characters, just letters and numbers. |
| password | Case sensitive password. If user looses his password, the new one must be set. Password is stored in encrypted form for security reasons, so it cannot be retrieved from database and must be changed by the user who has proper permission for such operation. |
| first name | |
| last name | |
| Email which may be used by CloverETL administrator or by CloverETL server for automatic notifications. See Task - Send Email for details. |
User with permission "Create user" or "Edit user" can use this form to set basic user parameters.
If user looses his password, the new one must be set. So user with permission "Change passwords" can use this form to do it.
Assignment to groups gives user proper permissions. Only logged user with permission "Groups assignment" can access this form and specify groups which the user is assigned in. See Web GUI section Groups for details about permissions.
Since user record has various relations to the logs and history records, it can't be deleted. So it's disabled instead. It basically means, that the record doesn't display in the list and the user can't login.
However disabled user may be enabled again. Please note, that disabled user is removed from its groups, so groups should be assigned properly after re-enabling.