doc/gutshtml/SessionOn1.html - view

File: [LON-CAPA] / doc / gutshtml / SessionOn1.html
Revision 1.2: download - view: text, annotated - select for diffs
Tue Jul 22 14:47:00 2003 UTC (21 years, 4 months ago) by bowersj2
Branches: MAIN
CVS tags: version_2_9_X, version_2_9_99_0, version_2_9_1, version_2_9_0, version_2_8_X, version_2_8_99_1, version_2_8_99_0, version_2_8_2, version_2_8_1, version_2_8_0, version_2_7_X, version_2_7_99_1, version_2_7_99_0, version_2_7_1, version_2_7_0, version_2_6_X, version_2_6_99_1, version_2_6_99_0, version_2_6_3, version_2_6_2, version_2_6_1, version_2_6_0, version_2_5_X, version_2_5_99_1, version_2_5_99_0, version_2_5_2, version_2_5_1, version_2_5_0, version_2_4_X, version_2_4_99_0, version_2_4_2, version_2_4_1, version_2_4_0, version_2_3_X, version_2_3_99_0, version_2_3_2, version_2_3_1, version_2_3_0, version_2_2_X, version_2_2_99_1, version_2_2_99_0, version_2_2_2, version_2_2_1, version_2_2_0, version_2_1_X, version_2_1_99_3, version_2_1_99_2, version_2_1_99_1, version_2_1_99_0, version_2_1_3, version_2_1_2, version_2_1_1, version_2_1_0, version_2_12_X, version_2_11_X, version_2_11_5_msu, version_2_11_5, version_2_11_4_uiuc, version_2_11_4_msu, version_2_11_4, version_2_11_3_uiuc, version_2_11_3_msu, version_2_11_3, version_2_11_2_uiuc, version_2_11_2_msu, version_2_11_2_educog, version_2_11_2, version_2_11_1, version_2_11_0_RC3, version_2_11_0_RC2, version_2_11_0_RC1, version_2_11_0, version_2_10_X, version_2_10_1, version_2_10_0_RC2, version_2_10_0_RC1, version_2_10_0, version_2_0_X, version_2_0_99_1, version_2_0_2, version_2_0_1, version_2_0_0, version_1_99_3, version_1_99_2, version_1_99_1_tmcc, version_1_99_1, version_1_99_0_tmcc, version_1_99_0, version_1_3_X, version_1_3_3, version_1_3_2, version_1_3_1, version_1_3_0, version_1_2_X, version_1_2_99_1, version_1_2_99_0, version_1_2_1, version_1_2_0, version_1_1_X, version_1_1_99_5, version_1_1_99_4, version_1_1_99_3, version_1_1_99_2, version_1_1_99_1, version_1_1_99_0, version_1_1_3, version_1_1_2, version_1_1_1, version_1_1_0, version_1_0_99_3, version_1_0_99_2, version_1_0_99_1, version_1_0_99, version_1_0_3, version_1_0_2, version_1_0_1, version_1_0_0, version_0_99_5, version_0_99_4, loncapaMITrelate_1, language_hyphenation_merge, language_hyphenation, bz6209-base, bz6209, HEAD, GCI_3, GCI_2, GCI_1, BZ4492-merge, BZ4492-feature_horizontal_radioresponse, BZ4492-feature_Support_horizontal_radioresponse, BZ4492-Support_horizontal_radioresponse

Convert GUTs HTML to PROPER line endings.

<html> <head> <meta name=Title content="Session One: Roles, Data Storage, Parameters (Gerd)"> <meta http-equiv=Content-Type content="text/html; charset=macintosh"> <title>Session One: Roles, Data Storage, Parameters (Gerd)</title> <style> </style> </head> <body bgcolor=#FFFFFF class="Normal" lang=EN-US> <div class=Section1> <h2>Session One: Roles, Data Storage, Parameters (Gerd)</h2> <h3><a name="_Toc421867084">Domains</a></h3> Every user in LON-CAPA is member of one domain. A domain can be institutional and "open", for example "msu" or "wscc" - open means that in it there can be students, authors and other users. A domain can also be functional, for example "timss_tests" or "smith_publishers�. Physically, every domain needs at least one dedicated library server. <h3><a name="_Toc421867085">Userdata</a></h3> Every user in the system has one library server, which is their home server. It stores the authoritative copy of all of their records. Internally, this data is stored in a directory  /home/httpd/lonUsers/domain/1.char/2.char/3.char/username/ for example  /home/httpd/lonUsers/msu/s/m/i/smith/ <div style='border:solid windowtext .5pt;padding:1.0pt 4.0pt 1.0pt 4.0pt'> ls -alF /home/httpd/lonUsers/msu/k/o/r/kortemey -rw-r--r--   1 www      users       13006 May 15 12:21 activity.log -rw-r-----   1 www      users       12413 Oct 26  2000 coursedescriptions.db -rw-r--r--   1 www      users       11361 Oct 26  2000 coursedescriptions.hist -rw-r-----   1 www      users       13576 Apr 19 17:45 critical.db -rw-r--r--   1 www      users        1302 Apr 19 17:45 critical.hist -rw-r-----   1 www      users       13512 Apr 19 17:45 email_status.db -rw-r--r--   1 www      users        1496 Apr 19 17:45 email_status.hist -rw-r--r--   1 www      users       12373 Apr 19 17:45 environment.db -rw-r--r--   1 www      users         169 Apr 19 17:45 environment.hist -rw-r-----   1 www      users       12315 Oct 25  2000 junk.db -rw-r--r--   1 www      users        1590 Nov  4  1999 junk.hist -rw-r-----   1 www      users       23626 Apr 19 17:45 msu_12679c3ed543a25msul1.db -rw-r--r--   1 www      users        3363 Apr 19 17:45 msu_12679c3ed543a25msul1.hist -rw-r-----   1 www      users       17242 Nov 13  2000 msu_1827338c7d339a3msul1.db -rw-r--r--   1 www      users        1986 Nov 13  2000 msu_1827338c7d339a3msul1.hist -rw-r-----   1 www      users       18497 Dec 21 11:25 msu_1827338c7d339b4msul1.db -rw-r--r--   1 www      users        3801 Dec 21 11:25 msu_1827338c7d339b4msul1.hist -rw-r-----   1 www      users       12470 Apr 19 17:45 nohist_annotations.db -rw-r-----   1 www      users       13395 Nov 15  2000 nohist_bookmarks.db -rw-r-----   1 www      users      104264 Apr 19 17:45                              nohist_calculatedsheets_msu_12679c3ed543a25msul1.db -rw-r-----   1 www      users       13248 Apr  5 17:18                              nohist_calculatedsheets_msu_1827338c7d339b4msul1.db -rw-r-----   1 www      users       12568 Oct 28  2000 nohist_coursedescriptions.db -rw-r-----   1 www      users      765954 Apr 19 17:45 nohist_email.db -rw-r--r--   1 www      users      710631 Apr 19 17:45 nohist_email.hist -rw-r--r--   1 www      users          13 Apr 19 17:45 passwd -rw-r--r--   1 www      users       12802 May  3 13:08 roles.db -rw-r--r--   1 www      users        1316 Apr 12 16:05 roles.hist </div> Fig.2.1.1 � Directory listing of user�s home directory Files ending on .db are GDBM files, files ending on .hist are logs of entries to these files. Filenames starting with �nohist� do not keep history files. passwd stores the login mechanism and password (if applicable). environment stores name-value pairs that are automatically added to the session environment at login time, for example the full name, etc. roles stores the userroles. critical, nohist_email, and email_status are used by the messaging mechanisms Files with a course-ID as name, for example msu_12679c3ed543a25msul1.db, store performance data for that student in the course, as stored by store and restore in lonnet. Other files are caches, for example for previously calculated spreadsheets, etc. <h3><a name="_Toc421867086">Courses</a></h3> Courses are assigned to users, not vice versa. Internally, courses are handled like users without login privileges. The username is a unique ID, for example msu_12679c3ed543a25msul1 � every course in every semester has a unique ID, there is no semester transition. The userdata of the course includes the full name of the course, a pointer to its top-level resource map (�course map�), and any associated deadlines, spreadsheets, etc., as well as a course enrollment list. The latter is somewhat redundant, since in principle, this list could be produced by going through the roles of all users, and looking for the valid role of being student in that course. <div style='border:solid windowtext .5pt;padding:1.0pt 4.0pt 1.0pt 4.0pt'> ls -alF /home/httpd/lonUsers/msu/1/2/6/12679c3ed543a25msul1/ -rw-r-----   1 www      users       17155 Apr 25 16:20 classlist.db -rw-r--r--   1 www      users       60912 Apr 25 16:20 classlist.hist -rw-r-----   1 www      users       12354 Jan  4 16:40 environment.db -rw-r--r--   1 www      users          82 Jan  4 16:40 environment.hist -rw-r-----   1 www      users      103030 May 15 14:47 nohist_calculatedsheets.db -rw-r-----   1 www      users       13050 May  9 21:04 nohist_expirationdates.db -rw-r--r--   1 www      users           6 Jan  4 16:40 passwd -rw-r-----   1 www      users       17457 May  9 21:04 resourcedata.db -rw-r--r--   1 www      users        8888 May  9 21:04 resourcedata.hist </div> Fig.2.1.2 � Directory listing of course�s home directory classlist is this list of students in the course, environment includes the course�s full name, etc, and resourcedata are deadlines, etc (parameters for homework). <h3><a name="_Toc421867087">Roles</a></h3> Users keep their login, data, preferences, etc, over their complete tenure. Every user can have several roles, and the roles can change over the lifetime of a username. For example, over the course of studies, a student username assumes the role of "student" in different courses. Roles can have start and expiration dates. <table border=1 cellspacing=0 cellpadding=0> <tr> <td width=429 colspan=3 class="Normal"> Example: User smith at msu</td> </tr> <tr> <td width=85 class="Normal"> Instructor</td> <td width=171 class="Normal"> msu_12679c3ed543a25msul1</td> <td width=170 class="Normal">  </td> </tr> <tr> <td width=85 class="Normal"> Course Coordinator</td> <td width=171 class="Normal"> msu_12679c3ed543a25msul1</td> <td width=170 class="Normal"> From July 1st, 2001 to December 30th, 2001</td> </tr> <tr> <td width=85 class="Normal"> Instructor</td> <td width=171 class="Normal"> msu_18879c3ed543a25msul2</td> <td width=170 class="Normal"> From Jan 1st, 2001 to June 30th, 2001</td> </tr> <tr> <td width=85 class="Normal"> Resource Author</td> <td width=171 class="Normal"> <tt>msu</tt></td> <td width=170 class="Normal"> From Aug 15th, 2000</td> </tr> <tr> <td width=85 class="Normal"> Student</td> <td width=171 class="Normal"> msu_82679c3gd543a35msul1</td> <td width=170 class="Normal"> From July 1st, 2001 to December 30th, 2001 </td> </tr> </table> Fig.2.1.3 � Sample Instructor Roles <table border=1 cellspacing=0 cellpadding=0> <tr> <td width=433 colspan=3 class="Normal"> Example: User jones at msu</td> </tr> <tr> <td width=117 class="Normal"> Custom Role "Helproom TA (smith at msu)"</td> <td width=194 class="Normal"> msu_82679c3gd543a35msul1</td> <td width=119 class="Normal"> From July 1st, 2001 to December 30th, 2001</td> </tr> <tr> <td width=117 class="Normal"> Student</td> <td width=194 class="Normal"> msu_02679c3gq543a35msul1</td> <td width=119 class="Normal"> From Jan 1st, 2001 to June 30th, 2001</td> </tr> <tr> <td width=117 class="Normal"> Student</td> <td width=194 class="Normal"> umn_82679c3gd543a35umnl2</td> <td width=119 class="Normal"> From July 1st, 2001 to December 30th, 2001</td> </tr> <tr> <td width=117 class="Normal"> Exam Proctor</td> <td width=194 class="Normal"> msu_82679c3gd543a35msul1</td> <td width=119 class="Normal"> Feb 21st, 2001, 1pm to 3pm</td> </tr> </table> Fig.2.1.4 � Sample Student Roles <h3><a name="_Toc421867088">Custom Roles</a></h3> Course Coordinators are able to define named "Custom Roles" for their courses within a pre-defined set of capabilities. In addition to these custom roles, there are three standard course faculty/staff roles defined, Instructor, Exam Proctor and TA. The instructor of record in a small class is likely to be "Course Coordinator" and "Instructor" during the term when the course is running, and might remain course coordinator afterwards. Course coordinator can assign themselves new roles for their course anytime. </div> <div class=Section7> <h1><a name="_Toc514840853"> </a></h1> Custom role definitions are stored in the roles.db file of the role author. <h3><a name="_Toc421867089">Choose a Role, Role Privileges</a></h3> lonroles is a handler that allows a user to switch roles in mid-session. LON-CAPA attempts to work with �No Role Specified� as widely as possible, but certain handlers for example need specification which course they should act on, etc. Both in this scenario, and when the handler determines via lonnet�s &allowed function that a certain action is not allowed, lonroles is used as errorhandler. lonroles can also be accessed via the CRS button in the Remote Control. Fig. 2.1.5 shows a sample output of lonroles. <img border=0 width=434 height=198 id="_x0000_i1026" src="handout_files/image002.jpg"> Fig. 2.1.5 � Sample Roles Choice in lonroles.pm <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> System: / </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> �       Browse resources �       Generate anonymous statistics �       Create a Course Custom Role <ul type=disc> <li style='border:none;padding:0in'>Send internal email</li> </ul> </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> Domain: msu </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> �       Assemble resources �       Browse resources �       Grant/revoke role of Administrator (UNIX authenticated, Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Author (UNIX authenticated) �       Grant/revoke role of Co-Author (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Course Coordinator (UNIX authenticated) �       Grant/revoke Course Custom Role (UNIX authenticated, Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Domain Guest (UNIX authenticated, Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Exam Proctor (UNIX authenticated, Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Instructor (UNIX authenticated, Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Librarian (UNIX authenticated, Internally authenticated, Kerberos authenticated) �       Copy resources �       Grant/revoke role of Student (UNIX authenticated, Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Teaching Assistant (UNIX authenticated, Internally authenticated, Kerberos authenticated) <ul type=disc> <li style='line-height:90%;border:none; padding:0in'>Create, edit, modify and publish resources</li> <li style='line-height:90%;border:none; padding:0in'>Modify authentication mechanism and data for a user</li> </ul> </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> Course: lbs267L Lab SS01 </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> �       Assemble resources �       Grant/revoke Course Custom Role (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Exam Proctor (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Instructor (Internally authenticated, Kerberos authenticated) �       Copy resources �       Grant/revoke role of Student (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Teaching Assistant (Internally authenticated, Kerberos authenticated) �       Create, edit, modify and publish resources �       Generate anonymous statistics �       Set assessment parameters �       Send broadcast and receipt-required email �       View grades </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> Course: lbs267 Lecture SS01 </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> �       Assemble resources �       Grant/revoke Course Custom Role (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Exam Proctor (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Instructor (Internally authenticated, Kerberos authenticated) �       Copy resources �       Grant/revoke role of Student (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Teaching Assistant (Internally authenticated, Kerberos authenticated) �       Create, edit, modify and publish resources �       Generate anonymous statistics �       Set assessment parameters �       Send broadcast and receipt-required email �       View grades </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> Course: Demo Course </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> �       Assemble resources �       Grant/revoke Course Custom Role (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Exam Proctor (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Instructor (Internally authenticated, Kerberos authenticated) �       Copy resources �       Grant/revoke role of Student (Internally authenticated, Kerberos authenticated) �       Grant/revoke role of Teaching Assistant (Internally authenticated, Kerberos authenticated) �       Create, edit, modify and publish resources �       Generate anonymous statistics �       Set assessment parameters �       Send broadcast and receipt-required email �       View grades </div> <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> Construction Space: User: korte, Domain: msu </div> Fig. 2.1.6 � Sample Set of Privileges Fig. 2.1.6 shows a common set of privileges for the user roles in Fig. 2.1.5. The plain text explanations of the various roles and the extent of them is drawn from /home/httpd/rolesplain.tab, see Fig. 2.1.7. <div style='border:solid windowtext .5pt;padding:1.0pt 1.0pt 1.0pt 1.0pt'> [www@zaphod www]$ more /home/httpd/lonTabs/rolesplain.tab s:system wide d:domain wide c:course wide U:UNIX authenticated I:Internally authenticated K:Kerberos authenticated C:according to course preferences S:according to custom role settings R:according to resource settings L:unless locked X:according to user session state F:no restrictions cm:No Role, Cumulative Privileges su:Superuser dc:Domain Coordinator cc:Course Coordinator in:Instructor ta:Teaching Assistant ep:Exam Proctor cr:Course Custom Role st:Student ad:Administrator li:Librarian au:Author dg:Domain Guest ca:Co-Author csu:Grant/revoke role of Superuser cdc:Grant/revoke role of Domain Coordinator ccc:Grant/revoke role of Course Coordinator cin:Grant/revoke role of Instructor cta:Grant/revoke role of Teaching Assistant cep:Grant/revoke role of Exam Proctor ccr:Grant/revoke Course Custom Role cst:Grant/revoke role of Student cad:Grant/revoke role of Administrator cli:Grant/revoke role of Librarian cau:Grant/revoke role of Author cdg:Grant/revoke role of Domain Guest cca:Grant/revoke role of Co-Author mcr:Create a Course Custom Role mau:Modify authentication mechanism and data for a user bre:Browse resources are:Assemble resources cre:Copy resources ere:Create, edit, modify and publish resources mme:Modify metadata for a resource vgr:View grades mgr:Modify grades gan:Generate anonymous statistics dcm:Disable all communication among students sma:Send internal email srm:Send broadcast and receipt-required email pch:Post to chatrooms and bulletin boards dch:Delete messages from bulletin boards pac:Post anonymously rin:Get identity behind anonymous postings las:Lock and unlock assessments opa:Set assessment parameters ain:Assume a student's identity </div> Fig. 2.1.7 � Explanation of Privilege Shorthands <h3><a name="_Toc421867090">Role Initialization</a></h3> The privileges for a user are established at login time and stored in the session environment. A consequence is that a new role does not become active till the next login. Handlers are able to query for privileges using lonnet�s &allowed function. When a user first logs in, their role is the �common� role, which means that they have the sum of all of their privileges. During a session it might become necessary to choose a particular role, which as a consequence also limits the user to only the privileges in that particular role. <div style='border:solid windowtext .5pt;padding:1.0pt 4.0pt 1.0pt 4.0pt'> [www@zaphod www]$ more /home/httpd/lonTabs/roles.tab su:s csu&U:sma:mau:cdc&U dc:s sma dc:d cli&UIK:cau&U:cdg&UIK:mau:ccc&U:cin&UIK:cta&UIK:cep&UIK:ccr&UIK:cst&UIK:cad&UIK cc:s bre:sma:mcr cc:c cin&IK:cta&IK:cep&IK:ccr&IK:cst&IK:are:cre:ere:vgr:gan:srm:opa in:s sma in:d bre in:c vgr:mgr:gan:dcm:srm:pch:dch:pac:rin:las:opa ta:d sma ta:c bre&RL:vgr&CR:mgr&CR:srm:pch:dch:pac ep:d sma ep:c bre&R:mgr&R:dcm:las cr:d sma cr:c bre&R:vgr&SCR:mgr&SCR:gan&SCR:dcm&SC:srm&SC:pch:dch&S:pac:rin&S:las&SR:opa&SR st:d sma&L st:c bre&RXL:pch&L:pac&CL ad:d sma ad:c bre:gan:vgr:srm li:s gan:sma li:d mme au:s gan:sma au:d bre:are:cre:ere:cca&IK ca:s gan:sma ca:d bre:are:cre:ere dg:d bre&R </div> Fig. 2.1.8 � Privileges by roles and extent Role Assignment <img border=0 width=175 height=227 id="_x0000_i1027" src="handout_files/image003.jpg"> Fig. 2.1.9 � Assigning privileges to a user <ul type=disc> <li>loncreateuser.pm allows users to within their own privileges (�cxx privileges) create users and give them roles (Fig. 2.1.9) </li> <li>londropadd.pm allows course coordinators to upload courselists in different formats, and automatically create users (if they do not exist already), assign them the role of student in a course, and add them to the classlist. </li> <li>loncreatecourse.pm allows domain coordinators to create new courses and assign course coordinators.</li> </ul> <h2><a name="_Toc514840854"> </a></h2> </div> <div class=Section2> </div> </body> </html>