Overview
If more than one person uses an application, which is usually the case in client-server architecture or Web interfaces, you need to control access or provide different features according to the connected users. It is also essential to provide security for sensitive data. You can provide this security by assigning passwords to users and creating access groups that have different levels of access to information in the application or to application operations.
For an overview of 4D's security features, see the 4D Security guide.
Assigning group access
4D’s password access system is based on users and groups. You create users and assign passwords, put users in groups, and assign each group access rights to appropriate parts of the application.
Groups can then be assigned access privileges to specific parts or features of the application (Design access, HTTP server, SQL server, etc.), or any custom part.
The following example shows Design and Runtime explorer access rights being assigned to the "Devs" group:
Activating access control
You initiate the 4D password access control system in client-server by assigning a password to the Designer.
Until you give the Designer a password, all application access are done with the Designer's access rights, even if you have set up users and groups (when the application opens, no ID is required). Any part of the application can be opened.
When a password is assigned to the Designer, all the access privileges take effect. In order to connect to the application, remote users must enter a password.
To disable the password access system, you just need to remove the Designer password.
Users and groups in project architecture
In project applications (.4DProject or .4dz files), 4D users and groups can be configured in both single-user and client-server environments. However, access control is only effective with 4D Server. The following table lists the main users and groups features and their availability:
| 4D (single-user) | 4D Server | |
|---|---|---|
| Adding/editing users and groups | yes | yes |
| Assigning user/group access to servers | yes | yes |
| User identification | no (all users are Designer) | yes |
| Access control once the Designer has been assigned a password | no (all access are Designer) | yes |
Toolbox editor
The editors for users and groups are located in the toolbox of 4D. These editors can be used to create both users and groups, assign passwords to users, place users in groups, etc.
Users and groups editor can be displayed at runtime using the EDIT ACCESS command. The whole users and groups configuration can also be edited during application execution using 4D language commands of the Users and Groups theme.
Directory.json file
Users, groups, as well as their access rights are stored in a specific project file named directory.json.
This file can be stored at the following locations:
- in the user settings folder, i.e. in the "Settings" folder at the same level as the "Project" folder. These settings are used by default for the application.
- in the data settings folder, i.e. in the "Settings" folder in the "Data" folder. If a directory.json file is present at this location, it takes priority over the file in the user settings folder. This feature allows you to define custom/local Users and Groups configurations. The custom configuration will left untouched by an application upgrade.
If 4D password access control is not enabled, the directory.json is not created.