This use case describes the process where any user - besides the Administrator - can attempt to become the Administrator. The motivation for this is:
- It is preferred by ACME that the Login screen not be displayed when security is disabled
- This leads to a condition where a user cannot login as the Administrator (because there is no Login screen) when security is disabled
- Therefore, this use case is a workaround for not having a login screen but also needing to have an Administrator log in
- This use case is the same whether security is enabled or disabled
-
ISSUE: This use case affects only the Editor (frame, or session) currently under consideration; if the user has multiple Editors (sessions) open at the same time, those other Editors are not affected by this change
-
Administrator login attempts are not logged
- External user
- The user is logged into the system
- Security may be enabled or disabled
- The difference here is that the original user id is either a real user like "Ralph" (if security is enabled) or the user will be the user "Nobody" (if security is disabled)
- The user selects an option to "Become Administrator"
- If the system detects that an Administrator is already logged in:
- The system notifies the user of this condition (i.e., "The Administrator is already logged in, and can only log in once.")
- The use case stops here
- The system prompts the user for the Administrator password
- If the password is invalid, the user is informed of this
- (There are no limits on the number of login attempts)
- If the password is correct, continue
- If the user does not have a current job open, continue
- If the user has a current job open, and the job is clean:
- The system closes the job; continue
- Else, if the user has a current job open, and the job is dirty:
- The system prompts the user to save their information ("Save your changes - yes, no, cancel?")
- If the user selects Cancel, this operation is stopped
- If the user selects No, their changes are discarded; continue
- If the user selects Yes, their changes are saved; continue
- The system closes the job
- The system changes the internal state of the program so that it is just as though the Administrator has just logged in, except:
- The system remembers who the user was before they became Administrator
- If the username is displayed on screen, such as in a status bar, the username is changed to "Administrator"
-
The user performs their administrative functions ...
-
The user attempts to switch back to their previous identity
-
They are returned to their previous identity
- The user has all the permissions of the Administrator
- The system marks any database actions as being performed by the Administrator
-
The user can "switch back" to their original user id
- See the "External User Login" use case for the Administrator for the Administrator's initial login conditions regarding the Navigator and menu items that are enabled
- A user cannot become the Administrator and then become another user
- An Administrator cannot become any other user at any time; only when this sequence of steps is followed can they switch back to being their original identity
- Note - that is not the intent of this use case
- The "Switch User" option is only available to non-Administrator users
- The "Switch Back" option is only available to the Administrator when they used the
"Become Administrator" option to become the Administrator
-
If the user originally logged in as Administrator, the "Switch to Administrator" and "Switch Back" options are not available
|
|