Allow users to modify specific properties of their accounts

By default, all users have the permission to modify some properties of their own accounts. The permission is granted by a built-in security role, User self-service. The role enables users to modify only the properties that belong to the Personal Information and Web Information property sets.

Personal Information

Property	Name in schema
Assistant	assistant
Notes	info
Picture	thumbnailPhoto
Personal title	personalTitle
Street address	streetAddress
Home address	homePostalAddress
Country	c
Country code	countryCode
Country name	co
City	l
Office	physicalDeliveryOfficeName
P.O. Box	postOfficeBox
Postal address	postalAddress
Zip or postal code	postalCode
Registered address	registeredAddress
State or province	st
Street	street
Preferred delivery method	preferredDeliveryMethod
Phone number	telephoneNumber
Other phone numbers	otherTelephone
Mobile phone	mobile
Other mobile phones	otherMobile
Home phone	homePhone
Other home phones	otherHomePhone
Fax number	facsimileTelephoneNumber
Other fax numbers	otherFacsimileTelephoneNumber
IP phone	ipPhone
Other IP phones	otherIpPhone
Pager	pager
Other pagers	otherPager
International ISDN number	internationalISDNNumber
Primary telex number	primaryTelexNumber
Telex number	telexNumber
MSMQ digests	mSMQDigests
MSMQ sign certificates	mSMQSignCertificates
Primary ISDN number	primaryInternationalISDNNumber
Teletex terminal identifier	teletexTerminalIdentifier
User certificate	userCertificate
User-Cert	userCert
Shared folder path	userSharedFolder
Other shared folder paths	userSharedFolderOther
User SMIME certificate	userSMIMECertificate
X121 address	x121Address

Web Information

Property	Name in schema
Web page	wWWHomePage
Other web pages	url

In this tutorial, you will learn how to grant users the rights to modify specific properties of their own accounts and how to configure Adaxes web interface to enable users to edit these properties.

Grant permissions

To allow users to modify properties of their own accounts, you need to add the corresponding permissions to the built-in security role User self-service.

Permissions granted by security roles are effective only within Adaxes.

Launch Adaxes administration console.
How
- On the computer where Adaxes administration console is installed, open Windows Start menu.
- Click Adaxes Administration Console.
Expand Adaxes service \ Configuration \ Security Roles \ Builtin and select the User self-service role.
In the Permissions section on the right, click Add.
To add a permission to modify a property:
- In the list of object types, select User.
- In the Property-specific permissions list, select the desired permission in the Allow column.
  
  If the property you need is not available in the list, select the Show all properties checkbox.
Click OK and then click Save changes.

Any changes made to built-in security roles can be discarded. To do it, right-click a role and then click Restore to Initial State in the context menu.

Customize web interface

To enable users to modify a specific property of their accounts in the web interface, you need to add a corresponding field to the form used to edit own user accounts.

Open Adaxes web interface configurator.
How
- On the computer where web interface configurator is installed, open Windows Start menu.
- Click Adaxes Web Interface Configurator.
To configure the web interface, you need to have the appropriate permissions.
Permissions
The permissions to configure the web interface are delegated via security roles. By default, only service administrators have the appropriate permissions. To enable other users to configure the web interface, grant them the corresponding permissions.

To create a security role that grants the permissions to configure web interface:
- In Adaxes administration console, right-click your Adaxes service, point to New and click Security Role.
- Enter a name for the new security role and click Next.
- On the Permissions step, click the down arrow embedded into the Add button and click Configure Web Interface.
- Click Next and follow the steps in the wizard.
In the top left corner, select Self service.
In the left navigation menu, click Management.
In the Forms and views section, select My account in the drop-down list.

If the list doesn't contain the My account item, click More in the drop-down, then click Add and select My account.
Activate the Update tab.
Select the section where you want to add a new field and click Add below the Fields list.
Select the property you want to add to the form and click OK.
Save the changes.

For more details on how to customize forms and views in the web interface, see Customize forms for user creation and editing.