Group Inheritance - Revision history

Steve at 10:41, 13 October 2022

2022-10-13T10:41:00Z

← Older revision		Revision as of 11:41, 13 October 2022
Line 26:		Line 26:

	== Single group inheritance ==		== Single group inheritance ==
	When only a single group applies, the inheritance is very simple to understand. An example of this is where the user is a member of exactly one group and their IP address either isn't relevant (in the case of [[RADIUS Attributes]]), or isn't in any of the defined networks. Imagine the tree of groups above, with users called Alys in ''Year10'', and Bob in ''Year12'' and a configuration that blocks web accesses to social networking websites for everyone except for sixth form students:		When only a single group applies, the inheritance is very simple to understand. An example of this is where the user is a member of exactly one group and their IP address either isn't relevant (in the case of [[RADIUS: Attributes]]), or isn't in any of the defined networks. Imagine the tree of groups above, with users called Alys in ''Year10'', and Bob in ''Year12'' and a configuration that blocks web accesses to social networking websites for everyone except for sixth form students:

	* The ''Social Networking'' category is blocked in the ''Everyone'' group with the filter sensitivity set to 5, which will be inherited by all of the groups.		* The ''Social Networking'' category is blocked in the ''Everyone'' group with the filter sensitivity set to 5, which will be inherited by all of the groups.

Steve at 16:28, 11 October 2022

2022-10-11T16:28:10Z

Show changes

Steve: Created page with "Opendium systems have a powerful grouping mechanism which is configured on the Users & Groups page, with groups organised into a tree, and users, networks and individual computers assigned to one or more of the groups. Settings, such as web filtering, permissions, etc. can be set on each group and by default are inherited by the groups, users and networks within. This is a very flexible approach, allowing global configuration to be set for the root ''Everyone'' grou..."

2022-10-11T11:25:55Z

Created page with "Opendium systems have a powerful grouping mechanism which is configured on the Users & Groups page, with groups organised into a tree, and users, networks and individual computers assigned to one or more of the groups. Settings, such as web filtering, permissions, etc. can be set on each group and by default are inherited by the groups, users and networks within. This is a very flexible approach, allowing global configuration to be set for the root ''Everyone'' grou..."

New page

Opendium systems have a powerful grouping mechanism which is configured on the [[Users & Groups]] page, with groups organised into a tree, and users, networks and individual computers assigned to one or more of the groups. Settings, such as web filtering, permissions, etc. can be set on each group and by default are inherited by the groups, users and networks within. This is a very flexible approach, allowing global configuration to be set for the root ''Everyone'' group, and then refined in the more specific groups, relaxing filters for staff or tightening them for students, for example.

When the system needs to check the configuration, it looks to see which groups apply. For example, when a user accesses a web page, the web proxy will look to see which groups the authenticated user who's making the request is a member of, and which groups contain networks to which the requesting IP address belongs.

Consider the following common group configuration, which is based on our [[Recommended Minimal Configuration#Group configuration|recommended group structure]]:

{{Recommended Group Structure}}

[[Category:Knowledgebase]]