Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: MOTION-157

...

Multiexcerpt
MultiExcerptNamesuperuser-user

The term superuser may refer either to a system user (an account type) or to a role (a definition of what a user is allowed to do in the system). In a vanilla installation of Magnolia, the superuser role is assigned to the superuser account. In addition to the superuser role, the superuser account has some other roles too, see Default roles, groups and users.

As the name implies, the permissions of the superuser account are usually unrestricted in any way. For instance, superuser can read and write to all default JCR workspaces on / .

Bestpractice

On a production system, create specific users with distinct roles and deactivate the superuser account.

...

A logged-in user can set one's own preferences by clicking the Edit user profile action in the top right corner. To access the action, click the down arrow in the corner:

Image RemovedImage Added

The action opens a dialog whose User profile tab allows changing the user's password, full name and email address:

...

The number of failed login attempts N that will trigger lockout is configurable using the property maxFailedLoginAttempts at Configuration > /server/security/userManagers/system and /admin. Different values may be set for Users and Systems Users.

...

heading0
enableHeadingAttributesfalse
enableSortingfalse
classm5-configuration-tree
enableHighlightingfalse

...

Node name

...

Value

...

Mgnl f
server

...

Mgnl f
security

...

Mgnl n
userManagers

...

Mgnl n
system

...

Mgnl p
class

...

info.magnolia.cms.security.SystemUserManager

...

Mgnl p
lockTimePeriod

...

0

...

Mgnl p
maxFailedLoginAttempts

...

5

...

Mgnl p
realmName

...

system

...

Mgnl n
admin

...

Mgnl p
class

...

info.magnolia.cms.security.MgnlUserManager

...

Mgnl p
lockTimePeriod

...

0

...

Mgnl p
maxFailedLoginAttempts

...

5

...

Mgnl p
realmName

...

Image Added

Properties:

Multiexcerpt include
MultiExcerptNameUserManager properties
nopaneltrue
PageWithExcerptLDAP Connector module

...