In your Lasso Site Admin, navigate to the Security tab.
Create Users and Groups
Once you've enabled your database(s), you can create users and groups in the Security -> Users and Security -> Groups sections. If you're just getting started, you can skip this step and use the AnyUser group and user, which allows you to provide access without a username and password.
Generally, groups are the underlying foundation of the Lasso security structure. You'll generally be assigning permissions for your databases and tables/layouts to groups. Permissions assigned to a group then propogate down to the users in those groups. You can create one group for all users, or create several groups, each with different security levels or access to different databases.
We recommend creating your groups first. That way, you'll be able to assign your users to groups as you create them.
To create a Group, use the Add Group... button in the Groups tab.
To create a User, use the Add User... button in the Users tab. If you have created one or more groups, you will be able to make that user a member of a group by selecting the group name in the Groups list, over at the right. You can Control-click multiple group names to add the user to multiple groups.
Configure Database Security
Up near the top right of the screen, there will be a pop up containing the lists of all your groups (and the AnyUser Group). Select the name of the first group you want to assign privileges for and click the Switch Group button. For basic configurations, the AnyUser group will suffice.
Next, click on Databases. For Connector, select the appropriate connector for your database (either Lasso Connector for MySQL, Lasso Connector for FileMaker Pro, or Lasso Connector for FileMaker SA). For Host, select your database host from the list (there will generally only be one).
Click on the name of the first database in the database list that you want to assign privileges to. You might need to use the < Prev and Next > buttons near the bottom of the window to navigate through the list. Make sure you're viewing the "Database Detail" listing for the appropriate database in the section to the the right before you continue.
Finally, select Allow for each of the privileges you would like to allow for that group on that database. You can also use the Allow All and Deny All buttons to quickly Allow or Deny all actions, or the Unassign button to clear all permissions and start over.
Remember, a privilege must be allowed at the database level to be allowed at the Table/Layout level. If you want users to be able to Add records to a given table/layout, you must enable the Add permission for the entire database. Generally, you want to set permissions at the database level to permit every possible action you might want to perform at the table/layout level.
You can set permissions for a different group by selecting the group from the listing near the top of the page and clicking "Switch Group."
Once you've set permissions for each applicable group, you can move on to setting Table/Layout Permissions.
Configure Table/Layout Security
Remember, a privilege must first be allowed at the database level to be allowed at the Table/Layout level. If you want users to be able to Add records to a given table/layout, you must enable the Add permission for the entire database.
Click on the Tables link at the top to navigate to the table security area.
Once again, there will be a pop up containing the lists of all your groups (and the AnyUser Group). Select the name of the first group you want to assign privileges for and click the Switch Group button.
Connector and Host should already be set to the appropriate options. For Database, click on the name of the first database containing tables/layouts you would like to assign privileges to.
Finally, select Allow for each of the privileges you would like to allow for that group on the table. You can also use the Allow All and Deny All buttons to quickly Allow or Deny all actions, or the Unassign button to clear all permissions and start over.
You can cycle through this process to assign privileges for each group to all relevant tables/layouts.
