X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/744ca00ccd1e7fda9d4210b18c1f4a734f3b2261..a942e37250873d383bd885ba0dba70c63b3c073d:/apps/workbench/app/views/users/_show_admin.html.erb diff --git a/apps/workbench/app/views/users/_show_admin.html.erb b/apps/workbench/app/views/users/_show_admin.html.erb index f667f388bd..4c76ede515 100644 --- a/apps/workbench/app/views/users/_show_admin.html.erb +++ b/apps/workbench/app/views/users/_show_admin.html.erb @@ -1,23 +1,108 @@ -

As an admin, you can log in as this user. When you’ve -finished, you will need to log out and log in again with your own -account.

+
+
+

+ As an admin, you can log in as this user. When you’ve + finished, you will need to log out and log in again with your + own account. +

-
-<%= button_to "Log in as #{@object.full_name}", sudo_user_url(id: @object.uuid), class: 'btn btn-primary' %> -
+
+ <%= button_to "Log in as #{@object.full_name}", sudo_user_url(id: @object.uuid), class: 'btn btn-primary' %> +
-

As an admin, you can setup this user. Please input a VM and repository for the user. If you had previously provided any of these items, they are pre-filled for you and you can leave them as is if you would like to reuse them.

+

+ As an admin, you can setup this user. Please input a VM and + repository for the user. If you had previously provided any of + these items, they are pre-filled for you and you can leave them + as is if you would like to reuse them. +

-
-<%= link_to "Setup #{@object.full_name}", setup_popup_user_url(id: @object.uuid), {class: 'btn btn-primary', :remote => true, 'data-toggle' => "modal", 'data-target' => '#user-setup-modal-window'} %> -
+
+ <%= link_to "Setup #{@object.full_name}", setup_popup_user_url(id: @object.uuid), {class: 'btn btn-primary', :remote => true, 'data-toggle' => "modal", 'data-target' => '#user-setup-modal-window'} %> +
-

As an admin, you can deactivate and reset this user. This will remove all repository/VM permissions for the user. If you "setup" the user again, the user will have to sign the user agreement again.

+

+ As an admin, you can deactivate and reset this user. This will + remove all repository/VM permissions for the user. If you + "setup" the user again, the user will have to sign the user + agreement again. +

-
-<%= button_to "Deactivate #{@object.full_name}", unsetup_user_url(id: @object.uuid), class: 'btn btn-primary', data: {confirm: "Are you sure you want to deactivate #{@object.full_name}?"} %> -
+
+ <%= button_to "Deactivate #{@object.full_name}", unsetup_user_url(id: @object.uuid), class: 'btn btn-primary', data: {confirm: "Are you sure you want to deactivate #{@object.full_name}?"} %> +
+
+
+
+
+ Group memberships +
+
+
+ Tip: in most cases, you want both permissions at once for a given group. +
+ The user→group permission is can_manage. +
+ The group→user permission is can_read. +
+
+ <% permitted_group_perms = {} + Link.limit(10000).filter([ + ['tail_uuid', '=', @object.uuid], + ['head_uuid', 'is_a', 'arvados#group'], + ['link_class', '=', 'permission'], + ]).each do |perm| + permitted_group_perms[perm.head_uuid] = perm.uuid + end %> + <% member_group_perms = {} + Link.permissions_for(@object).each do |perm| + member_group_perms[perm.tail_uuid] = perm.uuid + end %> + <% Group.order(['name']).where(group_class: 'role').each do |group| %> +
+ + + +
+ <% end.empty? and begin %> +
+ (No groups defined.) +
+ <% end %> +
+
+
+ To manage these groups (roles), use: +
    +
  • arv group create \
    --group '{"group_class":"role","name":"New group"}'
    • +
  • arv group list \
    --filters '[["group_class","=","role"]]' \
    --select '["uuid","name"]'
    • +
  • arv edit uuid
    • +
+
+
+
+
-<% content_for :footer_html do %> -<% end %>