Manage users
As the site administrator, you are responsible for managing users on the website by adding users and assigning them roles and permissions, but you are also responsible for ensuring that users are removed correctly. On this page, we will go through these steps and what you need to consider.
Only grant access to your website to individuals who have undergone training.
Before you, as site administrator, grant publishers access to your website, it is your responsibility to ensure that they have registered for and completed the appropriate Drupal training. In order to be granted access rights to a website in Drupal, you must have passed and completed the Drupal training course.
Exceptions apply to the roles Calendar writer and Personnel.
Users who will only have the roles of Calendar writer or Staff do not need to complete any Drupal training. Please note that if, for any reason, users may be assigned a different role on your website, they must first undergo training to obtain a new role with extended permissions.
Instructions for user administration
- Go to the administrator menu and select Users > Add CAS User.
- Enter the Lucat ID for the new user under CAS Username.
- Under the heading "e-mail", select "lu.se" if it is not already selected.
- Select the boxes with the roles that the user should have. Remember to only assign the roles that are necessary for the user to perform their tasks on the website.
- If you want to add more users with the same role(s) and permissions, you can add more Lucat IDs in a row in the field where you entered the first Lucat ID in step 2.
- Click Create new accounts to complete the step.
- Go to Users > List all users
- Find the user you want to edit and click Edit on the far right.
- Make the changes you want, such as changing permissions or blocking the user from Drupal if necessary. The password change field is ineffective and should always be left blank.
- When you are finished, click Save to save your changes.
It is possible to grant a user access to a limited part of the website by selecting which sections they should have access to. Please note that the user will also have access to pages that do not belong to any section at all.
- Go to Users > List all users and click Edit to the right of the user you want to assign permissions to.
- Ensure that the Section writer role is ticked.
- Go to the Workbench Access tab to see sections linked to the menu structure.
- Tick the sections you want the user to have access to. The user will automatically have access to all subpages in the section you have selected. If you do not tick any sections, the user will only have access to pages that are not under any section in the menu.
A user with the role of "site writer" can only edit pages under sections they have been assigned to. Site administrators and site editors have access to and can edit all pages.
Now it is important to understand the consequences of removing a user and how to do it correctly. A user can technically be the owner of content, even if someone else is listed as the Page Manager, for example. According to Drupal, the owner is usually the user who originally created the material.
Before deleting an account, you need to consider which option and which approach is the best choice. Below, we list the options you have for deleting an account and finally provide instructions on how to do so.
Disable
The first option means that you deactivate the account and retain all content created by this account. This means that the user cannot log in, but the account remains. The account will also continue to appear in your list, but it will be unusable.
Deactivate and unpublish all content
The next option also involves deactivating the account, but in this case, you also unpublish all content created by this user. So all pages remain in Drupal, but they are unpublished, so the public cannot see them. If this user created the website's home page, that's a bad idea, because then it will be unpublished. Please note that this applies not only to entire pages, but also to infoboxes and other types of content that the person may have created.
Delete the user completely but retain published content
The third option actually removes the user completely, so the account is no longer stored in Drupal. However, the content remains, because with this option, all content produced by this user is instead linked to a "guest account" (Anonymous).
However, we would like to remind you that it is good if all content on the website belongs to an actual person who can take responsibility for it, so if you use this option, you should go through all content belonging to the anonymous user and assign it to real people by changing the author.
Delete the user and all content
The last option is risky, and we have had users who have had a really hard time after deleting large parts of their website in this way. The user will disappear, but so will all the content that person has created. Before using this option, you must be absolutely certain that the content will never be needed again, or that you have first assigned it to another user by changing the author.
If you are in any doubt, we recommend that you always use the first option. This also allows you to easily reactivate the user if necessary.
Select method and delete user account
To delete an account, go to Users -> List all users and find the person you want to remove. Tap Edit and scroll to the bottom of the page. There you will find the red Cancel account button. Then select which of the options you want to use.
User roles and permissions
If you use Drupal when working with one or more websites, you will be assigned a role. The role you are assigned determines the permissions you will have and simply regulates which parts of the website you can access and make changes to. Your role and permissions depend on what you need to be able to do on the website you are working on.
You are assigned roles and permissions by the website administrator
Each website has a web administrator, and you should contact the person who holds this role on the website you will be working with to obtain the correct role and permissions. In most cases, the website administrator is also the website manager. A rule of thumb is that you should have the role and authorisation required to perform your duties, but no more than that.
Website administrators and editors
A site administrator, also referred to as site admin here on Drupal-lathunden, is a website administrator. As a site administrator, you have access to and can configure the entire website, create and edit all content types, and assign different permissions to users. The role of site administrator is usually only assigned to you as the website manager, and you will be assigned this role by the web department once you have completed your training in Drupal for site administrators. Once you have been assigned the role of site administrator, you are responsible for ensuring that users who work with the website are assigned the correct roles and permissions, and you are responsible for administering these.
This means that you have permission to do everything on the website that the roles below have, and you also have permission to:
- Create and manage new users.
- Configure the website.
- Work with the entire website's information structure and sections.
- Assign access to sections to users with lower permissions.
Drupal training requirement: Yes
A site editor is an editor for the website. If you have been assigned the role of site editor, you can create and edit all content types. You can also move content within the website.
You are authorised to:
- Create landing pages, pages, and web forms.
- Create landing pages, pages, and web forms.
- Upload files.
- Create Page managers.
- Create articles and events.
- Work with the entire website's information structure and sections, and assign access to sections to users with lower permissions.
Drupal training requirement: Yes
Publishers
A site writer is an entry-level publicist. As a site writer, you can edit subpages within the section you have been assigned access to, and you can move pages within that section. You can also create events and articles.
The role of site writer is well suited to publishers who only need to edit subpages on a limited part of the website, but who also need to be able to create and edit articles and events.
You are authorised to:
- Edit subpages in the section you have been granted access to.
- Create content for content blocks.
- Upload files.
- Create Page managers.
- Create articles and events.
You can also:
- Edit all subpages that are not linked to a specific section, known as open subpages, and edit subpages for the sections you have been granted access to.
Drupal training requirement: Yes
A section writer is a publicist who can edit pages within their assigned section. If you have the role of section writer, you can also create and edit infoboxes and upload files. This role is well suited for publishers who, for example, need to be able to edit a specific page.
You are authorised to:
- Edit your own subpages, subpages in a section you have been granted access to, and open subpages that do not belong to a specific section.
- Create content for new content blocks and edit content blocks created by other users.
- Upload files.
- Create Page managers.
- Create contact boxes and edit contact boxes created by others.
You do not have permission to:
- Create new pages.
- Edit text in Full HTML text format.
- Move subpages around in the website's information structure.
- Edit or delete files uploaded by another user.
- Remove content blocks created by another user.
- Edit or delete a page manager created by another user.
- Delete a contact box created by another user.
Drupal training requirement: Yes
A news writer writes and publishes news stories. If you have the role of news writer, you can create and edit your own articles, upload files, and create new infoboxes. As a site administrator, you can assign a user the role of news writer only, or as a complement to section writer if the user also needs to be able to publish articles in addition to their permissions.
You are authorised to:
- Create articles.
- Upload files.
- Create content for new content blocks.
- Create Page managers
- Create contact boxes.
You do not have permission to:
- Edit or delete articles, content blocks, or files created by another user.
Drupal training requirement: Yes
Roles with lower privileges and access
Roles such as staff, web form editor and calendar writer have the lowest level of authorisation and access to the website. These roles are exempt from the requirement to attend the Web Department's training course for Drupal publishers.
A staff member is a publicist who has a personal page. If you have this role, you can edit your own personal page, and you can also upload files and create info boxes for your page.
You are authorised to:
- Edit your own staff page.
- Upload files.
- Create content for new image boxes and info boxes.
- Create Page manager.
You do not have permission to:
- Edit or delete content blocks created by other users.
- Edit or delete files uploaded by another user.
Drupal training requirements: No
A web form editor can create and edit their own forms and form pages, upload files, and create new info boxes. The role can be assigned independently, but also as a complement to a section writer who needs to be able to create, edit and publish forms or view results from forms.
You are authorised to:
- Create web forms.
- See results on all web forms.
- Create web form pages.
- Upload files.
- Create content for new content blocks.
- Create Page manager
You do not have permission to:
- Edit or delete content blocks created by other users.
- Edit or delete files uploaded by another user.
Drupal training requirements: No
A calendar writer can create and edit their own events in the website's calendar, upload files and create new info boxes. You can assign the role on its own or as a complement to a section writer who needs to be able to publish events on the website.
You are authorised to:
- Create and edit events.
- Upload files.
You do not have permission to:
- Edit or delete events created by another user.
- Delete files (such as images) that were uploaded when creating an event.
Drupal training requirements: No
Change web site manager and owner
Use the contact form
Link: https://www.webbpublicering.lu.se/support
(Log in LucatID and Freja+)
Select from the drop-down list: Web support > Permissions and training > Change website manager and website owner.
Please note that whoever takes over as website administrator must have completed the mandatory training "Site administrators in Drupal".