Managing Security in Vivaldi

Roles serve as the foundation of security in Vivaldi, dictating access permissions across menu navigation and individual forms.

1. 1 Navigate to Roles: Go to Security > Roles in the administration menu.
2. 2 Add Role: Click the Add button.
3. 3 Specify Name: In the modal dialog, provide a unique role name.
4. 4 Set Default Landing Page: (Optional) Enter an absolute or relative URL to define the initial screen users see upon logging in.
5. 5 Configure Active Status: Set the Active toggle to No at any time to temporarily suspend permissions granted by the role without unassigning users.

Adding New Users

1. 1 Navigate to Add User: Select Security > Add User.
2. 2 Enter Credentials: Provide a unique username and active email address.
3. 3 Assign Primary Role: Select the user's initial role (additional roles can be mapped later).
4. 4 Require Password Reset: (Optional) Check the prompt to require the user to change their password on initial login.
5. 5 Account State: Set the Active property to No to disable login access until re-enabled.

Managing Users & Multi-Role Assignments

Navigate to Security > Users to search, edit, disable, or delete existing user accounts.

Cumulative Role Permissions

When users are assigned multiple roles, Vivaldi evaluates permissions using a cumulative, most-permissive model. For example, if Role A grants View access and Role B grants Insert/Edit access to the same form, the user receives full View, Insert, and Edit privileges.

1. 1 Go to Security > User Roles Assignments.
2. 2 Click Add.
3. 3 Choose the target user and role from the dropdowns.
4. 4 Click Save to confirm.

Unlocking User Accounts

To unlock an account manually:

1. 1 Navigate to Security > Users.
2. 2 Locate the user, click Edit, and uncheck the Account Disabled checkbox.

Configuring User Self-Registration

Allow external users to create their own accounts by enabling the public registration endpoint:

1. 1 Navigate to Administration > Application Settings.
2. 2 Set the Self Registration property to 1.
3. 3 In Self Registration Role, enter the target Role ID (RoleID from ogs_role in MySQL).
4. 4 (Optional) Enter customized instructions in Self Registration Message.
5. 5 Direct prospective users to:
   yourdomain/ogs/selfregistration.php

Moderation & Verification Modes