2.6. Access rights

2.6.1. Idea

LMS may define up to 256 rules of access to the system. Each can forbid or permit access to definite modules. To each user we can freely assign combination of access rules.

By default following access rules list is defined:

Some of them permit access to modules and two forbid. Modules that user has always access is: welcome, copyrights, logout, chpasswd (chpasswd can change only own password), access to others is defined by rules.

Note

If we do not define to user any access rule, then LMS implicitly define rule 0 for him - full access.

2.6.2. How does it work?

Decision if user have right to access to module or not, looks like this:
- First of all: checking list of modules that user always have access.
- Next: checking if module mach to rules in each levels that user have access.
- Finally: Decision if user have authorizations to access to modules. If module mach to any level that forbid access then access will be forbiden even if user have level that permit access to module. (for example. Someone have full access and no access to adding computer module then he would not be able to appeal to this module). If module maches to level that permit access to module. Then LMS permit farther work. But if module does not match on any level then also will be printed no-access-msg.