Add a new group superadmin

During purge step, system administrator need to have access to all the project. Actually to do so, we add in production a nG6_ADMIN users which is added to all project manually (via sql query during purge process)

It would be interesting to have a new group "superadmin" which give access to all the projects.

changed milestone to %V3.2.6

added Enhancement label

changed title from Add a new right level to Add a new group superadmin

A table should be added to Administration > Admin management http://ng6-test.toulouse.inra.fr/index.php?id=58 This table (only visible for superadmins) will permit to create and delete superadmins.

A first version of this feature is online at http://ng6-test.toulouse.inra.fr , and can be tested with the following credentials:

user : test_superadmin, password : unlimited_power

To summurize:

• The superadmin group allows to navigate every project, run and analysis on nG6, hidden or not, with admin rights.
• There is a new table in the admin section ( Administration > Admin management ) that allow superadmins to add and remove users to and from the superadmin group.
• The group's key is NEVER written directly in the source code (yes, I'm looking at you admin group...), allowing an easier deployment for production use.
• The only requirement outside of the source deployment is to create a group with title = 'ng6_superadmin' .

Do not hesitate to help me test this feature, thanks!

With the user test_superadmin :

• the access to the projects seems ok
• no tab "administration" ==> The user test_superadmin have to be in admin group also to have access to this view. But, if a user is a superadmin he should by default have the right admin.

Oh, I had not seen that.

So there are two solutions:

• Updating the Administration tab to make it visible to superadmin I haven't found yet how to do it via typo3.
• Update the scripts to automaticly put superadmins in the admin group There could be a prompt when removing users from the superadmin group, saying "Do you also want to remove the user from the admin group?"

By web interface you can change it.

It probably can be change directly in db. Field fe_group in table page. Think to change database.sql file !

Oh, this is great, thanks a lot! (I was going crazy trying to make the 2nd solution work.)

The sql file is has been updated in this branch.

closed

mentioned in issue #69 (closed)

reopened

The superadmin user cannot see all runs on the corresponding page: https://ng6.toulouse.inra.fr/index.php?id=56

It has been fixed with this commit/push: ce6052b5

The page takes quiet a moment to load (32 seconds...). I checked the CPU usage, there was no visible impact.

Additional requirement:

• superadmin users should be able to update a nG6-generated user's password.

mentioned in commit 6a57665c

mentioned in merge request !59 (merged)

The "superadmin can update any password" feature has been added via the commit 6a57665c .

closed

I have tested the feature, superadmins can indeed change any password.

Good to go!