1. support.3roundstones.com
  2. docs
  3. 1.3
  4. articles
  5. adding users

Adding users

To add a new user, an existing user who is part of the "admin" group must:

  1. Navigate the the /admin URL.
  2. Select a group into which the new user is being added.  That group's edit template will be accessed when the link is clicked.
  3. Invite a new user using the icon in the Members field.
  4. Complete a user invitation form for the person to add.
  5. Save the group.
  6. Add the user to other User Groups as needed by clicking on the Members icon and using the lookup search box in the dialogue.

The new user will receive an email invitation with a registration link and instructions on how to log in.

It is necessary for Callimachus to send email in order to invite new users!  Make certain that your etc/mail.properties file is correctly configured before you attempt to invite users.  If your users do not receive invitations, check the etc/mail.properties file for correctness first.

The /admin screen is shown in the following screenshot.  You are advised to follow the Principle of Least Privilege when adding users to groups.  Select the appropriate group:

Then add one or more members:

Editing group membership

Selecting the icon to the right of the Members header will display a new user invitation form:

The new user invitation form

When you have finished editing the group, don't forget to save your changes!

Saving a group

A user invitation email message will look something like this:

User Invitation Email

The Super Group

There is an additional group that is present in Callimachus by default: The "super" group.  Members of the super group have privileges to view and modify content in the /callimachus folder tree.  That is, they may modify the core of a running Callimachus instance.

The super group is useful for users wishing to fully explore Callimachus or to experiment on a running instance.  The Callimachus development team uses the group on a regular basis to develop the product.

However, enabling the super group can also be dangerous, especially for those systems that are accessible from the public Internet.  Any user account that is subverted and has membership in the super group will have permissions to modify many aspects of Callimachus.  So, we strongly recommend that Internet deployments not give user accounts membership in the super group.

Do not use the super group for Callimachus instances that are deployed to the public Internet.

You can create the initial Callimachus user in the “super” group at setup time by running the setup script with the -g flag:


bin/callimachus-setup.sh -g /auth/groups/super

Once the initial user is a member of the super group that user will have permission to invite other users into that group.