{"id":7434,"date":"2021-02-20T19:03:14","date_gmt":"2021-02-20T19:03:14","guid":{"rendered":"https:\/\/www.use-snip.com\/kb\/?post_type=ht_kb&#038;p=7434"},"modified":"2022-10-24T19:21:01","modified_gmt":"2022-10-24T19:21:01","slug":"user-accounts-adding-restrictions","status":"publish","type":"ht_kb","link":"https:\/\/www.use-snip.com\/kb\/knowledge-base\/user-accounts-adding-restrictions\/","title":{"rendered":"User Accounts, adding Restrictions"},"content":{"rendered":"<p>This article describes how to add <strong>Restrictions<\/strong> to <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/adding-user-accounts\/\" target=\"_blank\" rel=\"noopener\">user accounts<\/a> in the <span style=\"color: #0000ff;\"><strong>SNIP<\/strong><\/span> NTRIP Caster.\u00a0\u00a0 Every\u00a0 <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/question-what-is-an-ntrip-client\/\" target=\"_blank\" rel=\"noopener\">NTRIP Client<\/a> connection to the Caster (every user) requires a valid user account, (a name and password to connect with).\u00a0 And each of these accounts can be further restricted in various ways.\u00a0 Use this feature to achieve a fine level of control over what resources (Base Stations) each user is allowed to connect to. \u00a0 This article summarizes the various ways a user account can be restricted.<\/p>\n<h2>New Users<\/h2>\n<p><a href=\"https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/CreateNewUserAccount.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-7416\" src=\"https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/CreateNewUserAccount.png\" alt=\"\" width=\"296\" height=\"360\" srcset=\"https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/CreateNewUserAccount.png 592w, https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/CreateNewUserAccount-247x300.png 247w, https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/CreateNewUserAccount-41x50.png 41w, https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/CreateNewUserAccount-320x389.png 320w\" sizes=\"auto, (max-width: 296px) 100vw, 296px\" \/><\/a>When a new user is created (or an existing user account is edited) a user dialog is presented (click to enlarge image).\u00a0 <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/adding-user-accounts\/\" target=\"_blank\" rel=\"noopener\">This article<\/a> describes the basic process to add a new user.\u00a0\u00a0 The <em><strong>Basic Settings<\/strong><\/em> tab is available in all models of <span style=\"color: #0000ff;\"><strong>SNIP<\/strong><\/span> and is used to create and edit User Accounts.\u00a0 The other tabs are all used to add restrictions to the way in which the user account can connect. <span style=\"color: #008000;\"><strong>Note:<\/strong><\/span> These are all advanced features and depend on the presence of an active \u201cEnhanced User Management\u201d Plug-In to be used.<\/p>\n<p>Restrictions are cumulative.\u00a0 That is, a user may be blocked from connecting if ANY of the restrictions on that user account are found to be true.\u00a0 In the tabs of the dialog a checkbox icon (<strong>\u221a<\/strong>) is displayed for any tab that has active restrictions set.\u00a0 An <strong>X<\/strong> is used when the restriction has triggered (such as a user whose allowed connection time has past).\u00a0 Similar visual indicators are used in the table dialog that displays all users.<\/p>\n<h2>Restrictions<\/h2>\n<p>Each user account can be restricted in a a number of ways.\u00a0 A article which describe in greater detail the use of each restriction type may be found in the links below.<\/p>\n<h3><a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-time\/\" target=\"_blank\" rel=\"noopener\">Restrict by <span style=\"color: #0000ff;\"><strong>Connection Time<\/strong><\/span><\/a><\/h3>\n<p>The feature is used to disable a user&#8217;s ability to connect past a predetermined date and time. Caster operators who sell access time to their customers can use this feature to control access to paying clients.\u00a0 Use this feature if you wish to grant another party short term access to the Caster or (on conjunction with other restrictions below) access to a specific Base station (or stations) for a predetermined period of time.<\/p>\n<p>Its use is described further in <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-time\/\" target=\"_blank\" rel=\"noopener\">this article<\/a>.<\/p>\n<h3><a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-base\/\" target=\"_blank\" rel=\"noopener\">Restrict by <span style=\"color: #0000ff;\"><strong>Base Stations<\/strong><\/span> the User can or cannot use<\/a><\/h3>\n<p>The feature is used to control the user&#8217;s ability to connect to a controlled list of Base Stations.\u00a0 When using this restriction, the user can have either a defined list of Base Stations they are allowed to connect to, or a list of stations they are not allowed (prevented) from connecting to.\u00a0 Use this feature to limit certain user accounts to certain Base Stations.\u00a0 The default state is that all valid user accounts can connect to all valid\/active Base Stations.<\/p>\n<p>Its use is described further in <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-base\/\" target=\"_blank\" rel=\"noopener\">this article<\/a>.<\/p>\n<h3><a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-agent\/\" target=\"_blank\" rel=\"noopener\">Restrict by <span style=\"color: #0000ff;\"><strong>User Agents<\/strong><\/span>\u00a0 (software) the User can or cannot use<\/a><\/h3>\n<p>The feature is used to control the user&#8217;s ability to connect only with a controlled list of <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/question-what-is-an-ntrip-client\/\" target=\"_blank\" rel=\"noopener\">NTRIP Clients<\/a> (in other words the software they use to connect with).\u00a0 This feature uses the &#8220;Agent&#8221; string which all client devices provide when first connecting.\u00a0 When using this restriction, the user can have either a defined list of Agents they are allowed to connect with, or a list of Agents they are not allowed (prevented) from connecting with.\u00a0 The default state is that all valid Agents can connect to all valid\/active Base Stations.<\/p>\n<p>Its use is described further in <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-agent\/\" target=\"_blank\" rel=\"noopener\">this article<\/a>.<\/p>\n<h3><a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-ip\/\" target=\"_blank\" rel=\"noopener\">Restrict by <span style=\"color: #0000ff;\"><strong>IP Addresses<\/strong><\/span> the User can or cannot use<\/a><\/h3>\n<p>The feature is used to control the user&#8217;s ability to connect from a controlled list of IP addresses.\u00a0 When using this restriction, the user can have either a defined list of IPs they are allowed to connect from, or a list of IPs they are not allowed (prevented) from connecting from.\u00a0 The default state is that all valid IPs (except those on the active <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/banning-abusive-users-simple\/\" target=\"_blank\" rel=\"noopener\">IP ban list<\/a>) can connect to all valid\/active Base Stations.<\/p>\n<p>Its use is described further in <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-ip\/\" target=\"_blank\" rel=\"noopener\">this article<\/a>.<\/p>\n<h3><a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-mac\/\" target=\"_blank\" rel=\"noopener\">Restrict by <span style=\"color: #0000ff;\"><strong>MAC Addresses<\/strong><\/span> the User can or cannot use<\/a><\/h3>\n<p>The feature is used to control the user&#8217;s ability to connect from a controlled list of MAC addresses.\u00a0 When using this restriction, the user can have either a defined list of MACs they are allowed to connect from, or a list of MACs they are not allowed (prevented) to connect from.\u00a0 The default state is that all valid MAP addresses may connect to all valid\/active Base Stations.<\/p>\n<p>Its use is described further in <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-mac\/\" target=\"_blank\" rel=\"noopener\">this article<\/a>.<\/p>\n<h3><a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-hourly-use\/\">Restrict by <strong>Hourly Usage<\/strong> (total use time)<\/a><\/h3>\n<p>The feature is used to control the total amount of time the User Account can be connected to the Caster.\u00a0 When using this restriction, the duration of each valid user connection is measured and accumulated.\u00a0 When a preset limit for that user is reached, the user may no longer connect to the Caster.\u00a0 Various email alerts are provided to inform both the account owner and the Caster operators when the time used is nearing its end point.\u00a0 The default state is to disabled this restriction.<\/p>\n<p>Its use is described further in <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-hourly-use\/\">this article<\/a>.<\/p>\n<h3><a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-with-a-geo-fence\/\">Restrict by <strong>Geo Fence<\/strong> the User must remain within<\/a><\/h3>\n<p>The feature is used to control the user&#8217;s ability to connect to a predefined region of use.\u00a0 When using this restriction, the user must report a NMEA-183 $GGA location that is within the prescribed region or they will be disconnected.\u00a0 The default state is that any reported NMEA-183 $GGA location may connect.<\/p>\n<p>Its use is described further in <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-with-a-geo-fence\/\">this article<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<hr \/>\n<p>&nbsp;<\/p>\n<h3>General Controls for <em>Allow<\/em> &amp; <em>Prohibit<\/em> lists<\/h3>\n<p>Several of the restrictions tabs use a common set of controls to create the lists of <em>allowed<\/em> and <em>prohibited<\/em> items they apply to a specific user account.\u00a0 These controls all work the same way, although the valid content differs with each tab (the below image is taken from the Base Station restrictions tab).<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7461\" src=\"https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/allowList.png\" alt=\"\" width=\"400\" height=\"200\" srcset=\"https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/allowList.png 400w, https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/allowList-300x150.png 300w, https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/allowList-50x25.png 50w, https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/allowList-320x160.png 320w\" sizes=\"auto, (max-width: 400px) 100vw, 400px\" \/>The <strong>Select All<\/strong> button checks all the items on the list (including any hidden ones which will also be shown). The list is increased to show all known valid values.\u00a0 This is a convenience button, to be used when more items will be checked than not checked.\u00a0 Logically speaking, there is no point in having a list with all possible choices enabled; it is better to disable the restriction itself (with the &#8216;activate&#8217; button).<\/p>\n<p>The <strong>Select None<\/strong> button performs the inverse of this, deselecting all items and showing them all (including hidden items).\u00a0 This is also a convenience button, to be used when more items will be UN-checked than checked.<\/p>\n<p>The <strong>Add&#8230;<\/strong> button allows the operator to enter a valid value that is not yet present in the Caster.\u00a0 [For example, a Base Station name that is not part of the <span style=\"color: #0000ff;\"><strong>SNIP<\/strong><\/span> the Caster setup when this dialog was opened.]<\/p>\n<p>The <strong>Restore<\/strong> button return the list to its last stable state.<\/p>\n<p>A checkbox called <strong>Hide Those Not Selected<\/strong> (found at the bottom of the tab) is used to hide items which are not checked.\u00a0 This has value for clutter reduction on Casters with large Base Stations lists so that the operator can clearly see what has been selected.<\/p>\n<hr \/>\n<p>Additional Restrictions by geographic area, and by data consumption levels\/limits are also being developed.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This article describes how to add Restrictions to user accounts in the SNIP NTRIP Caster.\u00a0\u00a0 Every\u00a0 NTRIP Client connection to the Caster (every user) requires a valid user account, (a name and password to connect with).\u00a0 And each of these accounts can be further restricted in various ways.\u00a0 Use this [&hellip;]<\/p>\n","protected":false},"author":13,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"ht-kb-category":[283],"ht-kb-tag":[494,495],"class_list":["post-7434","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-managing-user-accounts","ht_kb_tag-restrictions","ht_kb_tag-user-accounts"],"_links":{"self":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/7434","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/comments?post=7434"}],"version-history":[{"count":27,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/7434\/revisions"}],"predecessor-version":[{"id":8592,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/7434\/revisions\/8592"}],"wp:attachment":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/media?parent=7434"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb-category?post=7434"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb-tag?post=7434"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}