0 Introduction

1 UMP Admin Enhancements

   1.1 Groups
   1.2 User Name Filter
   1.3 Send Email to Users
   1.4 Modify Single Permission
   1.5 Copy Permissions
   1.6 User List
   1.7 Labels

2 User Permission Enhancements

   2.1 Record Restriction: Restrict Search
   2.2 Record Restriction: Record Filter
   2.3 Record Restriction: Boolean Record Filter
   2.4 Category Restriction: Category Filter
   2.5 Category Restriction: Boolean Category Filter

3 Miscellaneous

   3.1 Cumulus Client Connection
   3.2 New Email Configuration
   3.3 Multi Language Text Input Dialogs
   3.4 Search Field Selection
   3.5 Sort Field Selection
   3.6 Sorting Direction
   3.7 Control Download Category
   3.8 Control Email Category
   3.9 Disable 'Save Permissions' on a UMP demo server
   3.10 Filter group/username on UMP_Admin startup

4 Feedback

The User Management Pro Admin 4.0 Web Application

The User Management Pro is an extension to the Canto Cumulus Web Publisher Pro (WPP) or Internet Client Pro (ICP) Option. This product comes with a multi-language web application and provides the technology to restrict the user's access to the categories and records in the Cumulus catalog.

This document contains an overview of the new features and functions of the new version of User Management Pro 4.

User Management Pro 4 implements new powerful functionalities to let the Administrator restrict the users access to the Cumulus catalogs. It comes with a brand new UMP Admin web application. The good news for all User Management Pro 3 customers: No changes are necessary for using the new UMP Admin with your current UMP 3 web application! You just have to replace the UMP library file in your current web application by the new one to use the new functionality! So if you have made changes to the UMP3 web application, you do not have to reimplement all these changes in a new web application - just use your modified web application with the new library file.

The new version provides even more setup dialogs to make it even easier for the Administrator to set the users' permissions. For some new functionalities UMP 4 uses a Cumulus Client Connection to read information out of your Cumulus catalogs. If a Client connection can not be established, the functionality is still there, but you might miss some comfort in setting the permissions. Find detailed information in chapter 3.1 Cumulus Client Connection.

1.1 Groups

User Management Pro 4 implements the definition of groups of users, an important function that is missing in the Cumulus Workgroup Edition. A user can belong to more than one group at a time.

You can select a name of a group from the list of groups to limit the list of users. You can select 'Show All' to show all the defined users. Select 'Not Assigned' if you want to see the users that do not belong to one of the defined groups.

Select a User Group to limit the list of users

Click on '+' or '-' to add a group to or remove a group from the selected user(s). This will lead you to the 'Assign Group' page.

Click on '+' or '-' to add or remove a group from the selected user(s)

You can assign a group name to a list of users or specify a new group name in the 'Assign Group' page:

Assign a group to a list of users

You can assign a group name by selecting it from the list of already existing groups or you can specify a new group name in the 'New group name' text box. Click on 'Assign Group' to save the group setting. The group names are displayed in the list of users.

1.2 User Name Filter

You can filter the list of users by typing the beginning of the user name in the 'Show Users' text box. Click on 'Filter' to only see the users that match the filter name.

Specify a user name to limit the list of users

The list of users above is limited to the user names that start with 'creative'. This is helpful if you do have to manage a long list of users and you do not know the group the users belongs to.

1.3 Send Email to Users

You can send an email to all the selected users in the list by clicking the button 'Send Email'. You can specify the subject and the email body in the 'Send email to' page. You can also send a carbon copy to yourself or a list of users.

The 'Send email to' page also informs about missing email addresses

The email is sent to all email addresses that have been specified in the Cumulus Server Console (field name: E-Mail Address). All the users with an email address specified are marked with an email icon in the list of users. If you have selected users that do not have an email address configured yet, you will get a warning on top of the 'Send email to' page. When clicking the 'Send Email' button, the email will be sent to all the available email addresses.

You can send an email to all the users marked with the email icon

Hold the mouse over the email icon to see the email address configured for the user.

You can verify the email address by positioning the mouse on the email icon

1.4 Modify Single Permission

User Management Pro 4 allows to modify a single permission for a lot of users at the same time. This feature is very helpful if you would like to change permissions for a lot of users after they have been configured, but their permission setup varies and you can not select users with similar permission settings easily.

Select the catalog and the permission to modify a single permission

Select the users and click the 'Modify Single Permission' button to go to the 'Modify Single Permission' page. Select the catalog and permission that you would like to change. The permission setup will be displayed and you can configure it as usual. Click on 'Save Permission' to save the user setting for all the selected users.

Only the selected permission is changed for the selected users, all other permission for these users stay as they are.

1.5 Copy Permissions

You can copy all permission settings of one user for one catalog to a list of other users. Copy the user to the clipboard by selecting the user from the list and clicking the clipboard icon.

Copy the user to the clipboard by selecting the user and clicking the clipboard icon

After putting the user into the clipboard, you can select the users that should get the permissions of the clipboard user and click on the 'Copy Permissions' button to go to the 'Copy Permissions' page:

Copy all permissions from one user to a list of users

Select the catalog and double-check again, if you want to copy the settings as this can not be undone! Click on the 'Copy Permissions' button to copy all the permission settings from the user in the clipboard to all the selected users.

1.6 User List

The 'User List' page helps you to compare the permission settings for the different users. It gives you a good overview over all the permissions set for the selected users.

The list of users provides a good overview over all permissions

Select the name of the catalog from the list. The user permissions are displayed for all selected users in the specified catalog. Click on the permission name link to modify a single permission for all the selected users.

1.7 Labels

Labels can help you to get a better overview over the users in the list of users. You can mark users or sets of users with a label by selecting the users in the list and by clicking the 'Label' icon which you can find next to the 'Users' column title.

Click on the assign label icon the get select the label

The list of predefined labels will be displayed. Select one of the labels to assign it to the selected users or select 'No Label' to remove a label from the selected user settings.

Select the label that you want to assign to the selected users

The label color will be used to mark the users in the list of users.

User Management Pro 4 provides more configuration settings for showing and hiding records and categories to the user. There are three different options of how to hide records from the user:

• a Restriction Search is added to the users search criteria
• based on the Category Assignment
• based on the setting of Boolean Record Fields

There are two different options of how to hide categories from the user:

• based on the Category Assignment
• based on the setting of Boolean Record Fields

The Record and Category Access Permissions

The UMP Admin now provides more flexibility in configuring access rights for the user. Click on the 'Select' link to go to the permission configuration page.

2.1 Record Restriction: Restrict Search

For every user you can define a search query that restricts the access to the records in the catalog. This query is added to every search query that is sent to Cumulus. To make the definition of the search query as easy as possible, UMP uses Cumulus Client queries, that have been saved and published. You can easily define the search query in the Cumulus Client by saving it in the Cumulus Search Window.

Select a search query from the 'Restrict Search' page to restrict the record access

In the example above, a search query with the name 'JPEG Files Only' is assigned to the user, he is limited to only access the JPEG files in the catalog. If there is no 'restrictSearch' query defined for the user, the user has full access to all the records of the catalog. The search query in the query file can be very complex and can consist of a lot of different search criterias combined by 'and' and 'or'.

Select the search query from the list of queries

You can select one of the published Cumulus search queries from the list. The search query text will be displayed to help you identify the correct query.

2.2 Record Restriction: Record Filter

You can limit the access to records by setting categories in the Record Filter permission. The user can only see the records within the selected categories (and its sub-categories). A category is specified by providing the full category path (seperated by ':'). An unlimited number of categories can be listed, seperated by comma.

List the categories to show its records to the user

If the Record Filter permission is empty, all the records are shown to the user. Click on the 'Select' link to go to the 'Select Record Filter' page. You can navigate through the complete category tree of the selected catalog and check the categories that you would like to use as the Record Filter. You can navigate through the category tree by clicking on the category name to go to its sub-categories (if available). On top of the page, you see your location in the category path, you can click on the category name to go to the category directly or click on the catalog name to go to the top of the category tree.

Your current selection will be displayed at the bottom of the page. Remark: this page is only visible if a Cumulus Client connection can be established to the Cumulus Server.

Navigate through the category tree to specify the filter categories

You can also use your filter setup for hiding categories from the user by selecting 'Use Record Filter for filtering categories also'.

2.3 Record Restriction: Boolean Record Filter

You can limit the access to records by setting boolean record fields in the Boolean Record Filter permission. The user can only see the records with the selected boolean fields set to 'true'. An unlimited number(!) of boolean record fields can be listed, seperated by comma.

List the boolean record fields to control the records shown to the user

If the Boolean Record Filter permission is empty, all the records are shown to the user. Click the 'Select' link to go to the 'Select Boolean Record Filter' page. Check the boolean record fields that you would like to use as the Boolean Record Filter. Only the boolean record fields of the selected Cumulus catalog are displayed in the page. Remark: this page is only visible if a Cumulus Client connection can be established to the Cumulus Server.

Select the boolean fields that you want to use as the Boolean Record Filter

Click the 'Select' button to set the Boolean Record Filter setting.

2.4 Category Restriction: Category Filter

You can limit the access to categories by setting categories in the Category Filter permission. The user can only see the selected categories (and its sub-categories). A category is specified by providing the full category path (seperated by ':'). An unlimited number of categories can be listed, seperated by comma.

List the categories that should be visible to the user

If the Category Filter permission is empty, all the categories are shown to the user. Click on the 'Select' link to go to the 'Select Category Filter' page. You can navigate through the complete category tree of the selected catalog and check the categories that you would like to use as the Category Filter. You can navigate through the category tree by clicking on the category name to go to its sub-categories (if available). On top of the page, you see your location in the category path, you can click on the category name to go to the category directly or click on the catalog name to go to the top of the category tree.

Your current selection will be displayed at the bottom of the page. Remark: this page is only visible if a Cumulus Client connection can be established to the Cumulus Server.

Navigate through the category tree to specify the filter categories

You can also use your filter setup for hiding records from the user by selecting 'Use Category Filter for filtering records also'.

2.5 Category Restriction: Boolean Category Filter

You can limit the access to categories by setting boolean category fields in the Boolean Category Filter permission. The user can only see the categories with the selected boolean fields set to 'true'. An unlimited number(!) of boolean category fields can be listed, seperated by comma.

List the boolean category fields to control the categories shown to the user

If the Boolean Category Filter permission is empty, all the categories are shown to the user. Click the 'Select' link to go to the 'Select Boolean Category Filter' page. Check the boolean category fields that you would like to use as the Boolean Category Filter. Only the boolean category fields of the selected Cumulus catalog are displayed in the page. Remark: this page is only visible if a Cumulus Client connection can be established to the Cumulus Server.

Select the boolean fields that you want to use as the Boolean Category Filter

Click the 'Select' button to set the Boolean Record Filter setting.

3.1 Cumulus Client Connection

The new version provides even more setup dialogs to make it even easier for the Administrator to set the users' permissions. For some of the new functionalities UMP 4 uses a Cumulus Client Connection to read information out of your Cumulus catalogs. If a Client connection can not be established, the functionality is still there, but you might miss some comfort in setting of the permissions.

Connection Indicator

You will find the information, if a Client Connection is established or not, on the upper left hand side of the users page. A Client Connection can not be established, if

• you are running out of Cumulus Client licenses
• the Java Classes serial number is not installed
• the Cumulus Client port 9287 is blocked by e.g. a firewall

So you want to make sure that your Cumulus Server installation has a valid Cumulus Java Classes serial number installed (and activated by your current Activationkey). The Cumulus Java Classes serial number is provided by Canto for free. Here are some of the serial numbers for the latest Cumulus versions:

UMP 4 only needs the read only access serial number installed to provide full functionality, as it only reads the information from the catalogs but does not make any changes to the catalog. You can find the serial number for your current Cumulus version, if it is not in the list above, on the Canto website at http://www.canto.com (> Download&Support).

3.2 New Email Configuration

With the help of UMP Admin 4 you are able to send emails to each and every user with a valid configured email address. You have to specify the user's email address in the Cumulus Server console. You can specify your email server configuration in the UMP Admin configuration.

Specify your email configuration before using the email function

Specify your email server attributes and click on 'Save Configuration' to make the new configuration valid.

3.3 Multi Language Text Input Dialogs

User Management Pro supports the languages English, German, French and Spanish in one web application. The welcome text and the first search name attributes can now be set in a comfortable dialog that supports one text for all languages or seperate text for each and every language.

Specify one text for all languages or language dependent strings

The different localised strings are seperated by tags from each other in the permission settings.

Localised strings seperated by locale tags

3.4 Search Field Selection

The new version makes it easier to select the quicksearch fields.

Click on the Select link to specify the list of Search Fields

Just click on the 'Select' link to go to the 'Select Search Fields' page.

Select the Search Fields from the list

Check the fields that you would like to use in the Quicksearch function and click on the 'Select' button to set your selection.

3.5 Sort Field Selection

The new version makes it easier to select the sort field.

Click on the Select link to specify the Sort Field

Just click on the 'Select' link to go to the 'Select Sort Field' page.

Select the Sort Field from the list

Select the sort field from the list of the avaialble sort fields and click on the 'Select' button to set your selection.

3.6 Sorting Direction

The new version makes it easier to configure the sort direction.

Click on the arrows to specify 'Ascending' or 'Descending'

Just click on the appropriate button to set the sort direction.

3.7 Control Download Category

You can limit the download of assets by setting a list of categories in the Control Download Categories permission. The user can only download the assets within the selected categories (and its sub-categories). A category is specified by providing the full category path (seperated by ':'). An unlimited number of categories can be listed, seperated by comma.

Click on the Select link to specify the categories that control the download of assets

If the Control Download Categories permission is empty, all the assets can be downloaded by the user. Click on the 'Select' link to go to the 'Select Control Download Categories' page. You can navigate through the complete category tree of the selected catalog and check the categories that you would like to use as the Control Download Categories. You can navigate through the category tree by clicking on the category name to go to its sub-categories (if available). On top of the page, you see your location in the category path, you can click on the category name to go to the category directly or click on the catalog name to go to the top of the category tree.

Your current selection will be displayed at the bottom of the page. Remark: this page is only visible if a Cumulus Client connection can be established to the Cumulus Server.

Navigate through the category tree to specify the Control Download Categories

3.8 Control Email Category

You can limit the sending of assets by email by setting a list of categories in the Control Email Categories permission. The user can only send the assets within the selected categories (and its sub-categories). A category is specified by providing the full category path (seperated by ':'). An unlimited number of categories can be listed, seperated by comma.

Click on the Select link to specify the categories that control the email assets function

If the Control Email Categories permission is empty, all the assets can be sent by email by the user. Click on the 'Select' link to go to the 'Select Control Email Categories' page. You can navigate through the complete category tree of the selected catalog and check the categories that you would like to use as the Control Email Categories. You can navigate through the category tree by clicking on the category name to go to its sub-categories (if available). On top of the page, you see your location in the category path, you can click on the category name to go to the category directly or click on the catalog name to go to the top of the category tree.

Your current selection will be displayed at the bottom of the page. Remark: this page is only visible if a Cumulus Client connection can be established to the Cumulus Server.

Navigate through the category tree to specify the Control Email Categories

3.9 Disable 'Save Permissions' on a UMP demo server

The Cumulus/UMP administrator can enable or disable all functions that modifies the user permissions in the Cumulus $Users catalog. This option is useful for sales partners to set up a User Management Pro demo server.

You can disable all saving functionality in the page '/UMP4_Admin/switch.jsp' in line 21:

session.setAttribute("com.hc.umpadmin.writeEnabled", "true");

Set the value of the attribute to "false" to disable the saving of permissions.

3.10 Filter group/username on UMP_Admin startup

The Cumulus/UMP administrator can set a group filter or a username filter that is used at startup of the UMP_Admin web application. You can specify these filters in the page '/UMP4_Admin/switch.jsp' in line 16/17:

session.setAttribute ("com.hc.umpadmin.groupFilter", "");
session.setAttribute ("com.hc.umpadmin.userFilter", "");

Set the value of the appropriate attribute to the group name or username to show the specified users at startup. You can also preset a username that is put into the clipboard at line 18:

session.setAttribute ("com.hc.umpadmin.clipboard", "");

Your feedback is very much welcome!

Please send all your questions about the product to the email address support@heymann-consulting.de. We try hard to answer your questions quickly and improve our products by implementing functionality based on your feedback.