Access Group
The valid operations that can be performed on an access group are:
| Operation | Description | Access Level |
|---|---|---|
| view | View the Access Group | |
| create | Create a new Access Group | |
| add user | Add a user to Access Group | |
| remove user | Remove a user from the Access Group | |
| add project | Add a project to the Access Group | |
| remove project | Remove a project from the Access Group | |
| delete | Delete the Access Group |
Group Types
There are four types of access groups:
| Type | Created by | Members | Can be changed by users |
|---|---|---|---|
| Custom | A user, in the web interface | Added and removed by the group's editors | Yes |
| Primary | Kleinkram, one for every user | Only that user; used to give a single user access | No |
| Affiliation | Kleinkram, per email domain | Every user whose email address is on that domain | No |
| Public | Kleinkram, once | Every user, implicitly; granting it access makes a project public | No; can only be granted |
See Base Concepts for how affiliation groups, primary groups and public projects work.
Membership Expiry
When you add a user to a custom access group, you can let the membership expire: after one week, one month, six months, one year, or on a date you choose. The default is Never. The group's member list shows each membership as Active or Expired.
Access to projects through the group ends when the membership expires. Kleinkram removes expired memberships from the group every four hours; until then, access to missions granted to the group still applies.