This document will explain the difference between ERP5, Zope and Developer users
and how to create Zope and Developer users. It does not cover
creating ERP5 Users and setting access permissions for ERP5 users.
Table of Contents
Standard ERP5 Users¶
ERP5 users are created in the person_module, either by hand (How to create Persons in ERP5)
or when using the ERP5 configurator. ERP5 users are day-to-day users working with
the data stored in ERP5. They have access permissions defined limiting the areas
in ERP5 they can use and the actions available.
ERP5 User Access Permissions¶
ERP5 user viewing permissions are defined through assignments. ERP5 allows to define
security on an assignment-basis using parameters like group, role, function and activity.
This way a person may have access to all documents related to a project including
the rights to read, write and delete objects, while another assignment for a
different project will only allow him to read documents.
Zope users (like the default user created when instantiating a new ERP5 instance)
have access the Zope interface which ERP5 is built upon. This means
Zope users can work with data stored in ERP5 but also develop within ERP5,
creating new views, forms, action and, workflows etc. Note not all
actions may be available to zope users on some portal types.
Adding Zope Users Using the ACL Interface¶
The main Zope Interface can be accessed when logged in as zope user by appending
/manage_main to the url. Find the folder called acl-users.
The acl-users section allows to assign roles to zope-users. You will have to
search a user by username, then click on the "?" of the role you want to assign
to this zope user and then add the respective user.
Note, that the manager role is a custom role with permissions superceeding
all 5A security roles and that it is good practice to NOT work with the initial zope
user. You should create your own zope user and logout and log back in with
this created user to work in zope. It is even better practice to try and use
a default ERP5 user account when not having to work with the ERP5 Zope interface
The developer user has more rights than the ERP5 and Zope users. Developer users
can work on the core level of ERP5. Therefore their access rights cannot be set
through ERP5 or the Zope interface. To enable developer access you have to go through the
Adding Developer User Using Instantiation Parameters¶
The quick way to add a developer user is to open the parameter tab,
add a new parameter with key
_ and value
Click update values and run "Play" (green button) to re-instantiate your