Product Rights Management (Cloud and Web only)

The x1.Cloud and WM2 have a new system of rights management, comparing to older cards and standalone HDFM/Big Voice processors.

This system currently applies to:

• x1.Cloud
• WM2

Initial setup

Cloud processing

For cloud processors (in containers or dynamic libraries), the initial setup is made at first run, when the storage is not initialized.

If the storage is not yet initialized, you can choose how to protect the web access. There are 2 modes:

• Setup mode: you define a setup account, which can then create an administrator account. The setup account always keeps the access and can delete the administrator.
• Admin mode: you define the administrator, which will be the single administrator.

To select the mode, you have to put in ENV the variable :

• SETUP_USER (and optionally SETUP_SECRET) to select Setup mode
• ADMIN_USER (and optionally ADMIN_SECRET) to select Admin mode
• none: the web access is opened, no login will be asked

If you do not set the xxx_SECRET, then the setup password will be randomly generated and print in logs (at info severity).

Standalone products

The protection is initialized with the Admin mode, using user admin and password admin

Usage

At first, there is no user, except either the setup or admin account if configured at initialization.

When there is no user, there is no password protection.

If you do not change the default admin password, anybody who logs in may change it and lock you out.

To activate the password protection, you have to create a user. For this, login and go to Setup->Product Rights Management->Open.

You may then change your own password and create a new user.

Each created user may be allowed to :

• View the preset/settings
• Load a preset (when applicable)
• Write the preset/settings
• Save a preset (when applicable)
• Change its own password

He can never change other users passwords, or delete other users. Only the admin is allowed to do that.

When at least a user is created, you can also choose what an unlogged user can see by selecting his rights, or by disabling totally unlogged user so can not even see the VU meters.

If you delete all users, the product is unlocked and anybody can access it again.

In setup mode, if the admin is deleted, only the setup user can recreate an admin account.