User Data Model
Media-iBox manages permissions through Users, Groups and Content Sources (“Categories”).
ADM_USERS
Stores users in the system.
- ENABLED (bit, null)
- If the user is active.
- Deletion of users is not recommended due to the “Owner” permissions set on objects.
- LOGIN (varchar, not null)
- User login on the system.
- PASSWORD (varchar, not null)
- Hashed/Salted user password.
- CHANGE_PASSWORD (bit, null)
- Informs if the user will be required to change his/her password on the next login.
- LAST_PASSWORD_CHANGE (datetime, null)
- Last time the user modified his password.
- LOGIN_TRY_NUMBER (int, null)
- Number of failed login attempts for this user. Excessive failures trigger a captcha on the login screen.
- PASSWORDEXPIRES
- Informs if this user’s password is subject to expiration rules.
Passwords are saved salted and MD5 hashed, and may optionally have security rules applied to them, including:
- Minimum length
- Character rules (Must contain number, uppercase letters, special characters)
- Blacklist of disallowed strings
- Forced password change every X days
A blacklist may also be applied to usernames.
ADM_GROUPS
This table only contains the default fields for a Media Type. Connection to ADM_USERS is done through a N:N relation using the LINKOBJECTS table.