Imeji User Management

Current State

• User account creation: Only system administrators have the right to create new user accounts.
• User can edit his own information and change his password.
• Every registered user is an account user that has the right to create own collections.
• One user can have as many privileges as he gets.
• Account information is sent per email

User Roles

Label	Description
System Administrator	Is allowed to work on the whole system view all images, collections, metadata profiles and albums view all account users create/delete account users delete images, collections and albums (in state private, public and discarded) withdraw images, collections and albums (in state public)
Account User	create collections create albums create metadata profiles inherits all rights from the Profile Editor, the Collection Administrator and the Album Administrator
Collections
Collection Administrator	Is allowed to work on one specified collection define following roles for the selected collection (share functionality): Collection Editor Image Editor Profile Editor Collection Viewer inherits all rights from the Collection Editor, Image Editor, Profile Editor
Collection Editor	Is allowed to work on one specified collection edit collection metadata upload images release collection delete collection (state private) withdraw collection (state public) inherits all rights from the Collection Viewer, the Image Editor and the Profile Editor
Collection Viewer	Is allowed to view images and metadata of a private collection
Albums
Album Administrator	Is allowed to work on one specified album define following roles for the selected album (share functionality): Album Viewer Album Editor inherits all rights from the Album Editor
Album Editor	Is allowed to work on the content of one specified album edit album metadata release album delete album (state private) withdraw album (state public) add pictures remove pictures inherits all rights from the Album Viewer
Album Viewer	Is allowed to view images and metadata of a private album
Other
Image Editor	Is allowed to work on images of one specified collection delete images edit image metadata inherits all rights from the Collection Viewer and the Profile Editor
Profile Editor	Is allowed to work on one specified metadata profile edit metadata profile inherits all rights from the Collection Viewer

Future Development

All actions will be defined individually, to offer a fine granular rights management.

User Actions

Label	Description
System Level
	Create user View Users Assign actions to a user View system details Delete users Edit user credentials Change own password ...
Item Level
	View own items Upload item Delete own item Publish image Withdraw item Delete published items ...
Collection Level
	View own collections Create collection Create profile for own collections Share collection Unshare collection Edit collection metadata Delete own collection Publish collection Withdraw collection Delete published collections ...
Album Level
	View own album Create album Share album Unshare album Edit album metadata Delete own album Publish album Withdraw album Delete published album Add items to an album Remove items from an album ...
Metadata Level
	Create profile for own collections Edit item metadata ...