Page 1 of 1

Administrator rights

Posted: 2020-11-23 14:24
by SkayyHH
Hello,

maybe someone has a solution how to separate the technical administrator from the data access. The Appgini administrator has access to the admin but can also see all data entries of the users via the admin.

I need a separation between administration functions like creating users etc. and administration of the data sets.

Many thanks for tips :-)

Re: Administrator rights

Posted: 2020-12-07 14:46
by pfrumkin
I would say you can't prevent the AG Admin from seeing everything. You can create a SysAdmin group to do your system tasks like creating users.

~Paul

Re: Administrator rights

Posted: 2020-12-08 11:34
by SkayyHH
Hi, thank you very much. But how can I give the group the right to create groups and users?

Thanks much, Kai

Re: Administrator rights

Posted: 2020-12-08 15:47
by onoehring
Hi,

you could also do the opposite: Just be a regular super admin (and to all administrative tasks like adding users, defining group permissions), but add to every page in the _init function a check whether the current user is superadmin - and if, show some message/send him somewhere else.

But well: The admin always can do everything.

Olaf

Re: Administrator rights

Posted: 2020-12-08 20:09
by SkayyHH
Thanks very much, Olaf !