As an admin, you can log in as this user. When you’ve finished, you will need to log out and log in again with your own account.

<%= button_to "Log in as #{@object.full_name}", sudo_user_url(id: @object.uuid), class: 'btn btn-primary' %>

As an admin, you can setup a shell account for this user. The login name is automatically generated from the user's e-mail address.

<%= link_to "Setup shell account #{'for ' if @object.full_name.present?} #{@object.full_name}", setup_popup_user_url(id: @object.uuid), {class: 'btn btn-primary', :remote => true, 'data-toggle' => "modal", 'data-target' => '#user-setup-modal-window'} %>

As an admin, you can deactivate and reset this user. This will remove all repository/VM permissions for the user. If you "setup" the user again, the user will have to sign the user agreement again.

<%= button_to "Deactivate #{@object.full_name}", unsetup_user_url(id: @object.uuid), class: 'btn btn-primary', data: {confirm: "Are you sure you want to deactivate #{@object.full_name}?"} %>

Group memberships

<%= link_to raw(' Add new group'), "#", {class: 'btn btn-xs btn-primary', 'data-toggle' => "modal", 'data-target' => '#add-group-modal'} %>

Tip: in most cases, you want both permissions at once for a given group.
The user→group permission is can_manage.
The group→user permission is can_read.

<% permitted_group_perms = {} Link.filter([ ['tail_uuid', '=', @object.uuid], ['head_uuid', 'is_a', 'arvados#group'], ['link_class', '=', 'permission'], ]).each do |perm| permitted_group_perms[perm.head_uuid] = perm.uuid end %> <% member_group_perms = {} Link.permissions_for(@object).each do |perm| member_group_perms[perm.tail_uuid] = perm.uuid end %> <% Group.order(['name']).where(group_class: 'role').each do |group| %>

<%= check_box_tag( 'group_uuids[]', group.uuid, permitted_group_perms[group.uuid], disabled: (group.owner_uuid == @object.uuid), data: { permission_head: group.uuid, permission_uuid: permitted_group_perms[group.uuid]}) %> user→group <%= check_box_tag( 'group_uuids[]', group.uuid, member_group_perms[group.uuid], disabled: (group.owner_uuid == @object.uuid), data: { permission_tail: group.uuid, permission_uuid: member_group_perms[group.uuid]}) %> group→user <%= group.name || '(unnamed)' %> (owned by <%= User.find?(group.owner_uuid).andand.full_name %>)

<% end.empty? and begin %>

(No groups defined.)

<% end %>

These groups (roles) can also be managed from the command line. For example:

arv group create \ --group '{"group_class":"role","name":"New group"}'
arv group list \ --filters '[["group_class","=","role"]]' \ --select '["uuid","name"]'
arv edit uuid