5.11. Administrative tasks

5.11.1. Language change

Any user can switch the interface language. To do this, in the upper right corner on the user icon, go to the “Settings” section (Pic. 5.107.).

../../_images/admin_settings_lang_en.png

Pic. 5.106. Go to Settings bar

The following languages are available for selection (Pic. 5.106.)

  • Default browser

  • Russian

  • English

  • Italian

  • Spanish

  • German

  • Portuguese

  • French

  • Czech

../../_images/admin_select_lang_en.png

Pic. 5.107. Selecting language

5.11.3. Create new user group

A dialog for creation of a new user group presented on Pic. 5.109. To open this window select “Control panel” (see Pic. 5.3.) in the main menu (see item 1 in Pic. 5.2.). In control panel (see Pic. 5.4.) select “Create” option in “Groups” block.

../../_images/admin_controlpanel_usergroup_create_eng.png

Pic. 5.109. “Create new group” dialog

In “Create new group” dialog enter full name and group name (short name), if necessary enter a group description, set group members and click “Create” button.

Note

A name for a group should contain only letters and numbers.

5.11.4. Create new user

A dialog for creation of a new user is presented on Pic. 5.110.. To open this window select “Control panel” (see Pic. 5.3.) in the main menu (see item 1 in Pic. 5.2.). In control panel (see Pic. 5.4.) select “Create” option in “Users” block.

../../_images/admin_controlpanel_user_create_eng.png

Pic. 5.110. “Create new user” dialog

In “Create new user” dialog enter the following information:

  • Full user name (e.g. John Smith)

  • Login – user login (e.g. smith)

  • Password

  • Group(-s) user belongs to (the list of available groups is provided below user info. If the required group is absent you need to create a new one (see Create new user group)).

Then click “Create” button.

Note

The password is limited in length in the range of 5-25 characters. Login can have symbols of the Latin alphabet, numbers and an underscore, but must begin necessarily with a letter.

5.11.5. Access management

NextGIS Web is resource based so each component (layer, group, service) is a resource. NextGIS Web provides extended settings for resource access permissions.

Permissions could be set during resource creation (see. Adding resources), or using resource update (see. Layer settings) To manage permissions use a “Permissions” tab in create/update resource dialog (see. Pic. 5.111.)

../../_images/access_rights_tab.png

Pic. 5.111. Permissions tab for resource

You can grant, revoke and update permissions using this tab. You can grant different permissions to a single resource for different users and/or groups. A dialog with permission item settings is presented on fig. Pic. 5.112..

../../_images/access_rights_dialog.png

Pic. 5.112. Permission item settings dialog

A dialog has the following elements:

  • Action

  • Principal

  • Permission

  • Resource

  • Propagate

Action defines the kind of the rule - allow or deny.

Note

By default everything is denied.

Principal - a user or a user group who is subject to a rule.

Besides standard users created by administrator, system has special system users:

  • administrator - Web GIS user which has administrative rights

  • owner - Web GIS user which created a particular resource

  • guest - Web GIS user which is accessing a particular resource without being authentificated (not logged in)

  • authenticated - authenticated Web GIS user under any account (but not guest)

  • everyone - all users including guests and authenticated

Besides standard groups created by administrator, system has special system user groups:

  • Administrators - a group whose users have administrative rights

  • Editors - a group, whose users do not have access to the control panel, but can create, edit and manage data

Adding users to this groups is a convenient way to set appropriate permissions across the whole system. These groups can’t be removed.

Permission - defines allowed or denied action with the resource. There are the following types of permissions:

  • All resources: All permissions

  • Resource: All permissions

  • Resource: Manage children

  • Resource: Change permissions

  • Resource: Read

  • Resource: Create

  • Resource: Update

  • Resource: Delete

  • Service: All permissions

  • Service: Connect

  • Service: Configure

  • Data structure: All permissions

  • Data structure: Write

  • Data structure: Read

  • Connection: All permissions

  • Connection: Write

  • Connection: Read

  • Connection: Connect

  • Web map: All permissions

  • Web map: Edit annotations

  • Web map: View annotations

  • Web map: Display

  • Collector: All permissions

  • Collector: Read

  • Data: All permissions

  • Data: Write

  • Data: Read

  • Metadata: All permissions

  • Metadata: Write

  • Metadata: Read

Resource - type of resource the rule created for. This setting is important for resource groups where it is required to grant permissions only to some types of resources. If there is no need to grant different permissions to different types of resources, select “All resources” for this setting.

Propagate checkbox defines if permission rules need to be applied to resources in sub-groups or not. Note, that setting permissions for lower level resource and propagating doesn’t cancel the need to set them for upward resources. For example, if you gave read access to a resource group that is contained by other groups, but you didn’t give appropriate permissions for higher level resources (up to root) the user will not get access to current resource group.

Permissions could be assigned to resources indirectly. For example permission “Web map: Display” could be assigned for a resource group and if a “Propagate” checkbox is checked this rule will be applied to every web map inside this resource group and inside all the subgroups.

Here is a description for available permission types.

All resources: All permissions - allows or denies any actions with resources.

Resource: All permissions - allows or denies any actions with resources excluding resource groups.

Resource: Manage children - allows or denies update of child resources settings.

Resource: Change permissions - allows or denies access permissions management for a resource.

Resource: Read - allows or denies reading of resources.

Resource: Create - allows or denies creation of resources.

Resource: Update - allows or denies modification of resources.

Resource: Delete - allows or denies deletion of resources.

Service: All permissions - allows or denies any actions with a service.

Service: Connect - allows or denies connections to a service.

Service: Configure - allows or denies modification of service setiings.

Data structure: All permissions - allows or denies any actions with data structure.

Data structure: Write - allows or denies modification of data structure.

Data structure: Read - allows or denies reading of the data structure.

Connection: All permissions - allows or denies any actions with connections.

Connection: Write - allows or denies modification of connections.

Connection: Read - allows or denies reading of connection parameters.

Connection: Connect - allows or denies usage of connection (defines if layers and data from the connection will be available for a user).

Web map: All permissions - allows or denies any actions with a web map.

Web map: Display - allows or denies display of a web map.

Data: All permissions - allows or denies any actions with data.

Data: Write - allows or denies data modification.

Data: Read - allows or denies reading of data.

Metadata: All permissions - allows or denies any actions with metadata.

Metadata: Write - allows or denies modification of metadata.

Metadata: Read - allows or denies reading of metadata.

When you assign rights to a particular resource take into account the rights of its constituent resources. For example to provide access to a WMS service you should grant the following permissions:

  • Service: Connect - to a connection itself.

  • Resource: Read - to all resources (vector and raster layers) published with WMS service.

  • Data structure: Read - to all resources (vector and raster layers) published with WMS service.

  • Data: Read - to all resources (vector and raster layers) published with WMS service.

If you have a complex system with several maps and different users who should work with these maps you can create user groups. You can assign different permissions to every group.

5.11.6. Example: Assigning permissions

5.11.6.1. Close a group for guests, open it for the user

../../_images/access_rights_group_for_quest_1_eng.png

Pic. 5.113. Settings for resourse group.

../../_images/access_rights_group_for_quest_2_eng.png

Pic. 5.114. Settings for root resource group.

You can also allow the user reading all higher resource groups as alternative.

5.11.6.2. Grant guest user resource display permission

Note

Guest users will be able to see administrative interface and view all folders excluding especially closed ones.

../../_images/access_rights_group_for_quest_0_eng.png

Pic. 5.115. Settings for root resource group.

../../_images/access_rights_group_for_quest_webmaps_eng.png

Pic. 5.116. Settings for resourse group with maps.

../../_images/access_rights_group_for_quest_geodata_eng.png

Pic. 5.117. Settings for resource group with geodata.

5.11.6.3. Grant guest user web map display permission

Note

Guest users will be able to see only a web map with layers

../../_images/Case2_Main_resource_group.png

Pic. 5.118. Settings for main resource group

../../_images/Case2_mapfolder.png

Pic. 5.119. Settings for resourse group with maps

../../_images/Case2_datafolder.png

Pic. 5.120. Settings for resource group with geodata

It is important to note that parent resources (if any) also need read permissions for the guest (see. Pic. 5.121.) If there aren’t rights to ‘read’ resource, then the data propagated to it will also be impossible to read.

../../_images/Case2_permissions.png

Pic. 5.121. Set in other resource groups

5.11.6.4. Grant a single user permissions to a single resource group

../../_images/access_rights_group_for_user_1.png

Pic. 5.122. Settings for a resource group

../../_images/access_rights_group_for_user_2.png

Pic. 5.123. Settings for root resource group

5.11.6.5. Grant a permission to input data using a mobile application to a group of users

Create a separate group of users (“Contributors” in this example) and a separate resource group.

../../_images/access_rights_group_for_mobile_import_1.png

Pic. 5.124. Settings for a resource group.

../../_images/access_rights_group_for_mobile_import_2.png

Pic. 5.125. Settings for root resource group.

5.11.6.6. Disallow view of webmap to all not authendificated users, grant view to authendificated users

../../_images/access_rights_deny_webmap_guests_allow_logined.png

5.11.6.7. Disallow all access for guest users (without password)

../../_images/access_rights_deny_all.png

5.11.7. Update user password

To update user password you can use administrative interface. To do it select “Control panel” (see Pic. 5.3.) in the main menu (see item 1 in Pic. 5.2.). In control panel (see Pic. 5.4.) select “List” option in “Users” block and click pencil icon near the user you want to update password for (see Pic. 5.126.). In opened window in “Password” field fill in a new password and click “Save” button.

../../_images/ngweb_change_password_eng.png

Pic. 5.126. User editting window.

Also there is an option to change user password using command line:

Warning

Setting a password using a command line is not safe.

env/bin/nextgisweb --config config.ini change_password user password
env/bin/nextgisweb --config config.ini change_password user password

Note

The password is limited in length in the range of 5-25 characters.

5.11.8. Customization of NextGIS Web outlook

You can customize the look of NextGIS Web, including logos, backgrounds, header and buttons colors etc. To do it select “Control panel” (see Pic. 5.3.) in the main menu (see item 1 in Pic. 5.2.). In control panel (see Pic. 5.4.) select “Custom CSS” in “Settings” block. In opened tab enter your own CSS rules. They will be used throughout your Web GIS on all its pages.

5.11.9. Custom CSS examples

5.11.9.1. Change header color

.header{background-color: #F44336; color: #fff;}

5.11.9.2. Remove NextGIS logo from Web map

.map-logo{display:none;}

5.11.9.3. Remove social networks sharing buttons

div.social-links {display:none;}

Remove hamburger button

span#rightMenuIcon {display:none;}

For return it back - open control panel by url http://username.nextgis.com/control-panel

5.11.9.4. Remove login button in upper right corner

ui.header-nav header__right {display:none;}

5.11.9.5. Remove identification window header

Identification window is a popup that is shown when you click on a feature on a Web map. This setting will hide it’s header and layer selector:

div.ngwPopup__content div div.dijitAlignTop,
div.ngwPopup__features span.ngwWebmapToolIdentify-controller {
    display: none;
}

5.11.9.6. Advanced example

This example shows how to change the look of pretty much all changeable elements of NextGIS Web. You can try these examples as is or change it to your liking. You can also see them in action here.

/* Base background */

body{
  background-color: #fff;
  background-image:url("https://nextgis.ru/img/hypnotize_transparent.png");
}

/* Header text and background color */

.header{
  background-color: #F44336;
  color: #fff;
}

/* Separator color between logo and title */

.header__title-logo{
  border-right: 1px solid rgba(255,255,255,.48) !important;
}

/* User info color in header */

.user-avatar__label{
  background-color: #fff !important;
  color: #F44336 !important;
}

.user-avatar .user-avatar__icon{
  color: rgba(255,255,255,.82) !important;
}

/* Primary button */

.dijitButton--primary{
  background-color: #fff !important;
  color:#f44336 !important;
  font-weight: bold !important;
  border: 2px solid #f44336 !important;
}

.dijitButton--primary:hover{
  background-color: #f44336 !important;
  color: #fff !important;
}

/* Default button */

.dijitButton--default{
  background-color: #fff !important;
  color:#999 !important;
  font-weight: bold !important;
  border: 2px solid #999 !important;
}

.dijitButton--default:hover{
  background-color: #999 !important;
  color: #fff !important;
}

/* Tabs color */

.dijitTabContainerTop-tabs .dijitTabChecked{
  border-top-color: #f44336 !important;
}

/* Left navigation panel on the map */

.navigation-menu{
  background-color: #fff !important;
  border-right: 1px solid rgba(0,0,0,.12) !important;
  color: #000 !important;
}

5.11.10. Customize NextGIS UI Elements (White label)

White label is a special module that allows you to remove or replace NextGIS logos and names with your company logos and names. The module is purchased and installed separately. The module adds a new section to the Control Panel (см. Pic. 5.127.), which allows you to disable or override various interface elements mentioning NextGIS.

../../_images/Control_panel_whitelabel.png

Pic. 5.127. ‘White label’ module in control panel

5.11.10.1. Company logo on Web map

In Control Panel, you can upload your logo in PNG format (see in:numref:logo_whitelabel_en) to display in the lower right corner of the map.

../../_images/logo_whitelabel_en.png

Pic. 5.128. Upload company logo file

If the file is not loaded, there is no logo (see in:numref:web-map_logo).

5.11.10.2. Company URL

You can assigned a new hyperlink for a company website to a just added logo (см. Pic. 5.130.)

../../_images/url-logo_en.png

Pic. 5.130. Company URL

5.11.10.3. Help page

By default, help leads to http://nextgis.com/help/. You can set a different hyperlink (see in :numref: help_whitelabel_en) to ‘Help’ (see in Pic. 5.132.).

../../_images/help_whitelabel_en.png

Pic. 5.131. Reroute a link to ‘help’

5.11.10.4. Support URL

Also you can set URL for the technical support page (see in tech_support).

This link will appear on error messages:

docs_ngweb/source/_static/tech_support.png:name:tech_support:align:center:width:16cm

  • The default Web GIS name is specified without mentioning NextGIS.

  • In WMS and WFS services resources, NextGIS QGIS is replaced with **QGIS**(см. Pic. 5.133.).

../../_images/WMS_WFS_whitelabel.png

Pic. 5.133. Replacing NextGIS QGIS (left) with QGIS (right) in WMS and WFS services

  • The social networks preview mentioning NextGIS is removed (см. Pic. 5.134.).