Developed security system

Domain is the main unit of C-Gator management. The number of domains supported by C-Gator depends on the system configuration. The system has got 3 types of system configuration:

• C-Gator Partner Edition supports only one domain
• C-Gator Standard Edition supports up to 10 domains
• C-Gator Enterprise Edition supports unlimited number of domains.

Every domain has got its own users, groups and sites. It means that several sites can exist within the framework of one domain. But the unified system of rights and roles and the unified list of users operate within one domain. A separate database is allocated for every domain. All general information of the system and the administrators list is stored in a separate «meta» database.

Authentication

The authentication forms-based mode limits the access to restricted site pages or the administrative interface. C-Gator uses the system of rights and roles to adjust user’s rights on site pages and for the administrative interface function.

Users

C-Gator allows creating any number of user’s accounts, to collect them into groups and to assign sets of roles.

Groups and roles

Besides users, groups of users are specified in the domain. Every group contains a set of roles.

The role determines a set of allowable operations, elementary actions which the system carries out in response to user’s commands. The set of actions is strictly programmed. As a rule, the system administrator assigns the structure of roles at the system initial setting. 

Every user enters at least one group, and even one role should be determined for each group. Otherwise a user can not even see the site. An unauthorized user is assigned to the fixed anonymous registration record and enters the group Everyone.

Access rights

Every resource in C-Gator has got its own set of access rights. The set specifies a group of resource users and actions allowed to the group. For example, to get a site page accessible for any user, it is necessary to enable the action "Viewing" for the group Everyone.

Page access restriction

The system of rights is also used to access restricted site sections only by registered users. You can quickly and simply create site sections for partners, clients etc. For example, to make a page accessible to be viewed only by users from the group "clients", it is necessary to enable the action "View" for the group "clients" and disable it for other groups.

Extended users profiles

Every C-Gator user has got user account. The account stores user login, password, e-mail, code of culture, name and surname. Besides the account users can have one or several profiles.

The user profile is a set of additional properties of the user. Profiles can vary in types; every type includes its set of fields. Different types describe different information about a user: internet-shop profile, forum profile, mailing profile, etc. with a free set of fields in every profile.

Profiles are stored in the User profile library. A separate resource type is reserved for every profile type. Profiles themselves are stored as multiple properties of such resources. Connection with a user account is carried out through a group of users. Every group has got a certain resource with profiles. Therefore, a user’s membership to various users groups determines profiles availability.

Audit trail

The special log registers any action of any user working with resources of a domain (creating/deleting/changing a resource/user/site, etc.). The audit trail saves all history of work with a resource and allows tracking when and who has made every change. The audit trial supports all objects and types of C-Gator resources: users, groups of users, libraries, pages, folders, images, news lines, etc.