Access Control is a new feature for Jomres v6.

 

 

 

Basic Access Control

 

The main purpose of this functionality is for you to enable/disable buttons in the new Jomres Main Menu. It isn't full access control like you'll see in Joomla, we wanted to keep the functionality easy to use so this functionality allows you to, for want of a better word, raise or lower the level a user needs to be to see certain menu options.

 

Changing the Access Level in the dropdown will automatically change the level for that minicomponent, you do not need to "apply" the changes anywhere, this is done via AJAX in the background as you make the change.

 

Access Control in Jomres comes in two forms. Either basic access control, or full access control, the difference between the two is important and unless you specifically need the Full Access Control we advise you to stick with the basic settings. This is enabled/disabled in the site config -> misc tab.

 

Historically Jomres has controlled users based on their status, which follows the pattern : Un-registered users (users who are not logged in), Registered users (logged in users who are not managers, i.e. guests), Receptionists, Managers and Super Property Managers. Super Property Managers are the highest, unregistered users the lowest. If a non-logged in user can do X, then generally the users above them can also do X (with some constraints).

 

Super Property Managers > Managers > Receptionists > Registered users > Non logged in users ( > means "greater than").

 

With basic access control, Jomres will continue to use it's existing, hard-coded access control settings, so Receptionist users will not be able to modify tariffs, for example. However, you will be able to use the dropdowns in the Access Control page to modify which user can see which options in the Jomres Main Menu. Items in this menu are just links, however and this particular access control level does not disable the user's ability to access the page it links to.

 

For example, the task to list booked out and cancelled bookings is "listoldbookings". The url to view this booking list is "/index.php?option=com_jomres&tmpl=component&task=listoldbookings". Using menu access control you could set "00010reception_option_06_listoldbookings" to "Super Manager", and this would remove the "Booked out and Cancelled Bookings" button from the main menu, however the manager could still view the old bookings by manually entering the url into the address bar of their browser.

 

This might be acceptable to you, however if you need to specifically forbid the user from viewing that script too then you'll need to enable Full Access Control in Site Config, then come to this Access Control option again and change "06001listoldbookings" to Super Managers.

 

Full Access Control

 

Full Access Control is much like the Basic control in that you will see a list of minicomponents which are controlled through changing the Access Level dropdown.

 

Full Access Control, however, comes with a huge warning : You MUST set the access control level for all minicomponents manually, it's no good just editing one and leaving the others to "default", otherwise you're opening up your system to be abused by users who do not have the rights to perform certain actions. What you set them to is up to you, this feature assumes that you're intimately familiar with Jomres and what each of the scripts do. If in doubt, set everything to Super Manager only to start off with, then adjust the levels downwards to allow different levels of users to access different pages as and when you identify a need.

 

The Jomres control panel will try to detect problems with your access control settings. If it finds that you have X minicomponents that can and should be controlled, and the number of records in the Access Control table do not match that number of minicomponents, then it will warn you. It cannot, however, guess what the level should be, only you know what's right for your site, so it's your responsibility to ensure that this is set correctly.

 

 

If you install a new plugin the Control Panel will warn you that access control settings are incorrect, you'll need to revisit this Access Control page to change that minicomponent's level to a setting that's appropriate for your site.