<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Menlo;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US">I have previously asked a question about whether we could restrict a Public User from creating/editing or deleting data in Omero.
Ola very kindly provided an answer, but I now need to ask a slightly different question:
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US">Is it possible to prevent a specific user (not just a Public user) from creating/editing or deleting data.
We would like to allow an external collaborator to access data in Omero, but prevent that collaborator from making changes, or from uploading additional content. Is there a way that we can limit one user in this way so that they have view access only?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US">John<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif""> Aleksandra Tarkowska [mailto:A.Tarkowska@dundee.ac.uk]
<br>
<b>Sent:</b> 25 October 2013 12:34<br>
<b>To:</b> John Webber (NBI)<br>
<b>Cc:</b> ome-users@lists.openmicroscopy.org.uk<br>
<b>Subject:</b> Re: [ome-users] Prevent a user from changing their own password?<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Dear John <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">Referring to your question about changing password. I think as long as you keep public user password safe and secure no one should be able to change password. First because changing password require Current password and second you can add <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Menlo","serif"">omero config set omero.web.public.url_filter '^/(?!webadmin)'</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black">to make changing user details will prompt login.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black">If you want to prevent public user from creating/editing/deleting your filter should look like:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Menlo","serif";color:black">omero config set omero.web.public.url_filter '^/(?!webadmin|webclient/action/\w+|webclient/annotate_(file|tags|comment))'</span><span style="font-size:13.5pt;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black">this should do the trick<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black"><br>
Kind regards<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black">Ola<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
<div>
<div>
<p class="MsoNormal">On 24 Oct 2013, at 11:27, John Webber (NBI) <<a href="mailto:John.Webber@nbi.ac.uk">John.Webber@nbi.ac.uk</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">All,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Following on from the emails below, I have implemented a Public user, so that we have Omero auto-login for a specified user. Is there, however, a way to prevent
this user from creating any content. If we have a site which auto-logins to a particular user, how can we make sure that someone does not create any inappropriate content (by attaching files, or creating new datasets, projects or screens) as this user.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">John</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm;z-index:auto">
<div>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span class="apple-converted-space"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Will
Moore [mailto:will@<a href="http://lifesci.dundee.ac.uk">lifesci.dundee.ac.uk</a>]<span class="apple-converted-space"> </span><br>
<b>Sent:</b><span class="apple-converted-space"> </span>16 October 2013 12:17<br>
<b>To:</b><span class="apple-converted-space"> </span>John Webber (NBI)<br>
<b>Cc:</b><span class="apple-converted-space"> </span><a href="mailto:ome-users@lists.openmicroscopy.org.uk">ome-users@lists.openmicroscopy.org.uk</a><br>
<b>Subject:</b><span class="apple-converted-space"> </span>Re: [ome-users] Prevent a user from changing their own password?</span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Hi John,<o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">Will you be providing this account username and password to external users, to log in with Insight / web? <o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">If so, then I don't know of a way you can currently prevent them changing their password, although others might have some ideas.<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">In the case where we have "public" user exposed via auto-login through the web framework, the user never gets to know their password or to log in, and we prevent them visiting the webadmin pages via a url filter as described<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><a href="https://www.openmicroscopy.org/site/support/omero4/developers/Web/PublicData.html"><span style="color:purple">https://www.openmicroscopy.org/site/support/omero4/developers/Web/PublicData.html</span></a><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> Cheers,<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> Will. <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal">On 16 Oct 2013, at 11:53, John Webber (NBI) wrote:<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Hi all,</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">We are planning to have an external Omero user account that can be used to view (read-only) images in our Omero instance. Is it possible to lock down this user account
within Omero, so that the user is not able to change their own password? We would envisage that a password change should only be done by an administrator – is this something that can be achieved?</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><br>
Thanks</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">John</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#4F81BD">-------------------------------------------------------------------------------------------------------------------------------------------- </span></b><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><b><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#548DD4">John Webber<br>
</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Computing and Information Services</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">NBI Partnership Ltd</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Norwich Research park</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Colney Lane</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Norwich</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">NR4 7UH</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">E-Mail:</span><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><a href="mailto:john.webber@nbi.ac.uk"><span style="color:purple">john.webber@nbi.ac.uk</span></a></span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Web:</span><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> <span class="apple-converted-space"> </span><a href="http://www.nbi.ac.uk/"><span style="color:purple">http://www.nbi.ac.uk</span></a></span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Tel:</span><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">
+44(0)1603 450 818</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Helpdesk (Tel): 1234</span><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">
HPC Support (Web):</span><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> <span class="apple-converted-space"> </span><a href="http://hpc.nbi.ac.uk/"><span style="color:purple">http://hpc.nbi.ac.uk</span></a>
(NBI internal)</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:12.0pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> HPC Support (Tel):</span><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">
2003 (NBI internal)</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The NBI Partnership Ltd provides non-scientific services to the Institute of Food Research, the John Innes Centre, The Genome Analysis Centre and The Sainsbury
Laboratory</span></i><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal">_______________________________________________<br>
ome-users mailing list<br>
<a href="mailto:ome-users@lists.openmicroscopy.org.uk"><span style="color:#0563C1">ome-users@lists.openmicroscopy.org.uk</span></a><br>
<a href="http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users"><span style="color:#0563C1">http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users</span></a><o:p></o:p></p>
</div>
</blockquote>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif"">_______________________________________________<br>
ome-users mailing list<br>
<a href="mailto:ome-users@lists.openmicroscopy.org.uk">ome-users@lists.openmicroscopy.org.uk</a><br>
<a href="http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users">http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users</a><o:p></o:p></span></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><br>
<span style="font-size:10.0pt">The University of Dundee is a registered Scottish Charity, No: SC015096</span>
<o:p></o:p></p>
</div>
</body>
</html>