← Back to team overview

dhis2-users team mailing list archive

Re: Server Errors

 

Lars,

Thanks for the clarifications - that all makes sense and I can now get superuser access. One last question - what authority allows a user to create a public user group - I can't find one that confers this ability? Sorry if I have missed the obvious.

One suggestion for you and the team - would it be possible to add a link to the 'User group' screen (see section 6.1.4 in the user manual) in the user module? Currently it seems like the only way to access this screen is via the Dashboard? Perhaps there are good reasons for not including this link, but it seems more logical to me.

Thanks
Dan

On 03/04/13 10:11, Lars Helge Øverland wrote:

Hi Dan

I assume you are running the demo database.

         1. I can't seem to generate a user with either 'superuser' or
            'system administrator' role when logged in as 'admin'. I
            also can't see the user 'admin' in the list of users. I
            can see that 3 users are assigned the role of system
            administrator and one to superuser, but none of the listed
            users have those roles. Am I missing something obvious?

In the demo db we have a user "system" which has the ALL authority through system administrator. The "admin" user has most authorities but not ALL through superuser. So this behavior is a consequence of the way authority is handled: When creating new users, you can assign the user roles for which your own account has all of the authorities. Also, you can view and edit other users for which your own account has all of the authorities. This is done so that authority can be deferred through a hierarchy - national users can create and manage province users, province users can create and manage district users and so on.

The pattern for the demo user's username/password is:

keita
Keita123

         1. There are a number of charts / maps / pivot tables that
            can't be deleted by the user 'admin'. I presume this is
            related to the user role issue in question 1, or is it?


This happens because those charts are created by the system user, and set to public view access and private edit access through the sharing mechanism. This allows "super users" to create a set of charts / maps / pivots which should be view-able by all users, but only editable by themselves to avoid them being changed/messed up.

http://dhis2.org/doc/snapshot/en/user/html/ch07.html

         1. Creating a chart (or map / pivot table) as the user
            'admin' seems to generate a system-wide chart by default
            i.e. all other users see that chart. If logged in as
            'lower' user role the default is to save the favourite for
            just that user. Why isn't the default behaviour the same
            for different users?


This happens because admin has the "create public chart" authority through superuser role, while "lower" users do not have that authority in the demo db. Creating private charts / maps / pivots is now open to everyone and require no authority granted. The thinking behind this is that a set of "superusers" should be able to generate general-purpose charts which should be consumed by everyone, while allowing "lower" users to create their own charts while keeping the list of charts for the common users short and relevant to themselves (essentially people can create their own charts without messing up everyone else's list of charts).

http://dhis2.org/doc/snapshot/en/user/html/ch07.html

        1.


         2. Running the data integrity check throws up a number of
            errors in 'Data elements without groups', Data elements in
            data set but not in forms or sections etc. Can these be
            ignored?


Yes these should be considered "best practices". The second warning could be good to clean up in order to have a healthy database.

        Thanks for all the great work - am really enjoying version 2.11!


Thanks.

Lars


Follow ups

References