Table of Contents

User Data Model

Media-iBox manages permissions through Users, Groups and Content Sources (“Categories”).

ADM_USERS

Stores users in the system.

  • ENABLED (bit, null)
    • If the user is active.
    • Deletion of users is not recommended due to the “Owner” permissions set on objects.
  • LOGIN (varchar, not null)
    • User login on the system.
  • PASSWORD (varchar, not null)
    • Hashed/Salted user password.
  • CHANGE_PASSWORD (bit, null)
    • Informs if the user will be required to change his/her password on the next login.
  • LAST_PASSWORD_CHANGE (datetime, null)
    • Last time the user modified his password.
  • LOGIN_TRY_NUMBER (int, null)
    • Number of failed login attempts for this user. Excessive failures trigger a captcha on the login screen.
  • PASSWORDEXPIRES
    • Informs if this user’s password is subject to expiration rules.

Passwords are saved salted and MD5 hashed, and may optionally have security rules applied to them, including:

  • Minimum length
  • Character rules (Must contain number, uppercase letters, special characters)
  • Blacklist of disallowed strings
  • Forced password change every X days

A blacklist may also be applied to usernames.

ADM_GROUPS

This table only contains the default fields for a Media Type. Connection to ADM_USERS is done through a N:N relation using the LINKOBJECTS table.