<div dir="ltr"><div><div><div><div>Thank you Ola,<br><br>This actually raise up the urgency for having a separate user role level to import images for other users. As you may probably know from my previous messages, we have imaging facilities to produce images for end users. To allow imaging facilities to upload images to their customers, right now I have following two methods:<br><br></div>1. create an admin "importer" user and share this account across imaging facilities, or<br></div>2. grant admin rights to all imaging facilities user accounts.<br><br></div>Either way there's potential security hazard for destroying the system with admin rights. If there's a "importer" user privilege level, I can simply grant this privilege to imaging facilities user accounts so that they can upload images for end users without having to give them admin rights.<br><br></div>I know your team is busying on many development works but this importer privilege level is critical to properly run OME in our environment. I would appreciate a lot if you can take this into your consideration.<br><br>Thanks,<br>Yanling <br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Sep 11, 2014 at 9:12 AM, Aleksandra Tarkowska <span dir="ltr"><<a href="mailto:A.Tarkowska@dundee.ac.uk" target="_blank">A.Tarkowska@dundee.ac.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Sorry forgot to add one thing here.<br>
You need to remember that user "importer" will have to be a system user<br>
(admin like root) and import data as another user. Otherwise you will end<br>
up with ownership mismatch.<br>
<br>
<br>
Kind regards<br>
Ola<br>
<span class="im HOEnZb"><br>
<br>
<br>
On 11/09/2014 14:00, "Josh Moore" <<a href="mailto:josh@glencoesoftware.com">josh@glencoesoftware.com</a>> wrote:<br>
<br>
>>If LDAP is enabled, would it be possible to login using local root user?<br>
><br>
>Yes. The OMERO root is always non-LDAP.<br>
><br>
>> Would it be possible to create more local users such as a dedicated<br>
>>local "importer" account, while other users still use LDAP passwords to<br>
>>login?<br>
><br>
>Yes. Only those users who have a DN set in the "password" table will be<br>
>authorized against LDAP.<br>
<br>
<br>
<br>
</span><div class="HOEnZb"><div class="h5">The University of Dundee is a registered Scottish Charity, No: SC015096<br>
</div></div></blockquote></div><br></div>