Access Control

Resource Groups provide the added bonus that they allow the Administrator to quickly provide access to new content to Users and User Groups. For example, if the organization originally had ten Live Channels on the network, and another Live Channel was added, the Administrator would simply need to add that Channel to the appropriate Resource Groups and the channel would be available.

5. Create Users on the ETV Portal Server

Creating users is an optional step that can be completed for the following reasons.

The organization needs to provide a single user with additional privileges above and beyond what is available to his or her User Group or Resource Group.

The organization wants to authenticate STB users using a PIN.

Users can be assigned to multiple User Groups.

6.Assign Resources to Users or User Groups

The final step is to provide access to Resources to Users and/or User Groups. The administrator can assign individual resources to Users or User Groups, or can assign Resource Groups (if created) to Users or User Groups. Detailed information on the steps to configure access control and provide access to resources to Users and/or User Groups is provided in the following sections.

Users

There are several different ways to provide privileges to different User and User Groups with the ETV Portal Server. The easiest way is to use the group structure of an existing LDAP database. LDAP User Groups can be added to the ETV Portal Server system and assigned permissions (see User Groups below). All of the users in this group will have the same permissions. For ease of implementation, VBrick recommends configuring User Groups and Resource Groups (see these sections below), prior to configuring users.

However, if further individual permissions need to be assigned, administrators can add them as a user. Under the users section, administrators have the ability to add, modify and delete users. Submit may be pressed at anytime during the process or can be done when everything has been added/modified. Users will have the permissions of the group as well as the additional permission that are assigned to them. The ETV Portal Server is additive in its permissions, meaning that it takes all of the permissions that are provided to a particular user and provides all of these to the user.

Users can be added by using the VBrick Database if LDAP authentication is not available or desired. Finally, in order to assign user PINs to access Set-Top Boxes, a user assignment is needed (see Set-Top Box Authentication section below). Note that STB PIN access is dependent on the VBrick Database being enabled. See Access Control on page 36 for details.

ETV Portal Server Administrator Guide

51

Page 59
Image 59
VBrick Systems ETV v3.1 manual Create Users on the ETV Portal Server, Assign Resources to Users or User Groups