Story #17968
closed
Design for user and group management UI in wb2
Added by Peter Amstutz over 3 years ago.
Updated over 3 years ago.
Estimated time:
(Total: 0.00 h)
Description
- Research requirements for user and group management
- Creating, activating/setting up/deactivating users
- Granting/revoking access to VMs
- Adding/removing users from group (group_class=role)
- Creating groups (group_class=role) through UI, listing/adding/removing users
- Removing/renaming groups
- "log in as user"
- editing user properties
- Write up existing management features in wb1 and wb2
- Propose UI design for user and group management
Files
- Related to Story #16946: WB2 user/group management features added
- Assigned To set to Stephen Smith
- Description updated (diff)
- Description updated (diff)
- Description updated (diff)
- Status changed from New to In Progress
As best as I can tell, this is the current status of various user/group operations in WB1/2 - UI ideas coming next
Feature |
WB1 Support |
Notes |
WB2 Support |
Notes |
User create |
Yes |
. |
Yes |
. |
User Activate |
Yes |
Under Attributes, kinda hidden |
Yes |
. |
User Set Up |
Yes |
. |
No |
. |
User Deactivate |
Yes |
. |
Yes |
. |
User Grant VM |
Yes |
By creating a link_class=permission |
No |
. |
User Revoke VM |
Yes |
Find link in advanced > metadata of user or vm |
No |
. |
User Add Group |
Yes |
. |
No |
. |
User Remove Group |
Yes |
Exposing directionality is confusing |
No |
. |
Group Create |
No |
. |
Yes |
. |
Group List Users |
Yes |
Group > Advanced > Metadata |
Yes |
Under advanced > metadata |
Group Add User |
No |
No UI on the group side |
No |
. |
Group Remove User |
Yes |
Advanced > Metadata > Show link > trash |
No |
. |
Group Delete |
Yes |
. |
Yes |
. |
Group Rename |
Yes |
. |
No |
. |
Log in as user |
Yes |
. |
No |
. |
Edit User |
Yes |
. |
No |
. |
Groups in WB2¶
- Currently clicking on a group takes you to an empty project, listing all users in the group here in a table would be great
- The "New Group" button could be replaced by "Add User" in the group membership list
- 3 dot menu in group membership list can handle removing users from groups
- The attributes dialog for groups would be a good place to allow renaming the group - alternatively, an option in the 3 dot menu would also work
Users in WB2¶
- Either an "Edit user" dialog or separate page would be great to house the various knobs/levers for user management - log in as user and edit user parameters could live here
- 2 sections in Edit User for Group membership and VM permissions
- Regarding groups - a table of groups which the user is a member would be clearer than the checkbox matrix in WB1
More things to consider
Both admins and non admins should be able to create and manage "role" groups. Users with manage permission can view/add/remove users, view/add/remove links to other "role" groups, and view/add/remove links to projects. Users with "read" or "write" permission to a group are able to view the permission links (but not add/remove them).
We would also like an out-of-band mechanism that sends an "invite" to a user to be added to a role group. (https://dev.arvados.org/issues/17814)
- Target version changed from 2021-08-18 sprint to 2021-09-01 sprint
Here are mockups of the user and permissions editor for groups
Here are mockups for a user edit ui including profile edit and group membership edit
- Target version changed from 2021-09-01 sprint to 2021-09-15 sprint
Here's the final admin tab for edit user
- Status changed from In Progress to Resolved
Also available in: Atom
PDF