====== Groups ====== Groups provide a way to group users together. Groups are used as a convenient way to grant permissions to multiple users in one go. Any permission granted to a group is automatically be granted to all members of the group. ==== The Groups administration page ===== Groups administration is done in the groups administration page. To open this page: * Open the main menu ("hamburger" menu at the top right of the screen) and click on ''Wiki administration''. * Select ''User management'' in the navbar on the left. * Select ''Groups''. This page lists all existing groups, and allows you to create a new group, as well as modify and delete existing groups. ===== Creating a group ===== Go to the groups administration page. Click on ''Create group'' to create a new group. Fill in the form that is displayed: * enter the name of you group (all groups in your wiki must have a unique name) * select the users you want to include in the group Save the form. ===== Modifying a group ===== Go to the group administration page. Click on the ''edit'' icon next to the group you want to modify. Update the group data in the form displayed and save. ===== Deleting a group ===== Go to the group administration page. <alert warning>This feature will be implemented soon</alert> ===== Permissions ===== Using groups is the recommended way to grant permissions, as opposed to granting permissions to individual users. If you have a large number of users, and complex permissions, then you should use groups. The recommended procedure is as follows: Let's assume you have 2 groups of users, one dealing with apples, and the other with oranges. Create 2 groups named ''apples'' and ''oranges''. Create all the pages for the ''apples'' group in the ''apples'' namespace, and all the pages for the ''oranges'' group in the ''oranges'' namespace. (Note that using the same name for the group and namespace is a convenience, not a requirement.) Restrict access the ''apples'' and ''oranges'' namespaces to all. <code> @ALL NONE apples:* @ALL NONE oranges:* </code> At this point no one can access the pages in the ''apples'' and ''oranges'' namespaces (except the wiki meister and wiki admins, who can access any page). Now grant the ''apples'' group the appropriate permissions on the ''apples'' namespace; and grant the ''oranges'' group the appropriate permissions on the ''oranges'' namespace. In the example below members of each group are granted the highest permission to their respective namespace. <code> @apples DELETE apples:* @oranges DELETE oranges:* </code> At this point members of the ''apples'' group have full access to (and full control of) the pages in the ''apples'' namespace, and all members of the ''oranges'' group have full access to and full control of the pages in the ''oranges'' namespace. As final step, add the relevant users to the ''apples'' and ''oranges'' groups. When a new user signs up, add the user to either one of the 2 groups as per her requirements. If a user requires access to both namespaces, add the user to both groups. If you need more fine-grained permissions, create groups for each set of permissions required. For example, let's say that you want to have one group of users to have full control of the ''apples'' pages, and another group restricted access to these pages (perhaps they are allowed to edit pages, but not to delete them). in this case, create 2 groups ''apples'' and ''apples-admin''. Grant the appropriate permissions to each, and add the users to the appropriate groups.