In the geoportal exist several user levels. Every user has a user account associated to a set of profiles. In the profiles the individual rights concerning the mapper, the catalogue the webservices and the overall geoportal functions are saved.

The following chapter explains the principles that rule the geoportal and that make sure that the access restrictions can be adapted very finely to the user’s needs.

The actors in the geoportal can be split into 4 groups:

When opening the geoportal's home page, the user automatically acts as a “general public” user, as long as he has not logged in the system by providing his user account name and his password. The “general public” is the anonymous standard user, who is granted with the minimal user rights in the system and who can do the basic operations in the geoportal. He can learn about the existing and available products by viewing the metadata catalogue's contents, and view the geodata in the mapping tool. He is also allowed to ask questions to the geoportal's support team and to read the FAQ. He CANNOT order products.

Unlike the “General Public”, the “client” has an individual user account associated to a password, which allows him to authenticate himself in the system. He has access to the “order” menu and can send orders or estimate requests concerning the available products in the catalog. In the order menus, he can check the state of his different orders and eventually download ordered files. For more information, please read the corresponding chapters in the geowiki.

The “Special Client” is also authenticated via his user account and his password. He has all the rights of the “client” but additionally, he can access to some specialized functions that require previous regulations. Depending on the granted rights, he can

• Create and manage his own sub-accounts (f.ex. in the case of large firms) and allocate them part or all of his own rights in the system.
• View other supplementary data in the geodata mapper, which are not available for the general public.
• Be granted less strict restrictions concerning the visibility of geodata in the geodata mapper, like the possibility to combine different geodata that are blocked for the general public, view attributes or use some geodata at scale levels that are not allowed to the general public.
• See and order specialized products that are not available to the general public.
• Use the WMS (Web Map Server) and WFS (Web Feature Server) webservices, that are compliant to the OGC (Open Geospatial Consortium) specifications and offered by that the geoportal's providers.

The “provider” is the highest-ranking actor in the geoportal, thus the one with the maximum level of rights and functions. He generally has all the rights of a “special client” but has some additional rights / functions to

• Publish his own geodata layers in the geodata mapper. This happens by the means of OGC compliant webservices, which are integrated in the mapping tool after validation by the geoportal's administrators.
• Offer his own geoproducts.
• Retrieve and handle the incoming orders and estimate requests of the clients in the portal (manually or automatically).

Subordinate accounts are used to delegate the management of the individual user accounts of customer organizations to one single main (« root ») account, without any interaction by the geoportal’s management. This means great flexibility for the customers as well as an easier task for the geoportal management team.

The owner of a root account can open new individual user accounts. Every single subordinate account can get all or a part of the special rights of the root account. Of course the root account cannot delegate more rights than it possesses itself.

The set of an organization’s subordinate accounts directly depends on the access rights of the root account, and the delegation of access rights can be done by switching on or off one or several items of the following:

• Availability of special layers and access rights in the geodata mapper,
• Availability of special products in the product catalog,
• Functions to create and manage orders in the name of the organization,
• Direct access to secured OGC webservices,
• Functions to manage the organization’s products, orders and metadata.

On the upper left of the geoportal’s screen appears the login block.

• He can log in by typing his username and password

• Log off with the link «disconnect »
• Manage the account settings with the link “my account”
• Create and manage subordinate accounts with the link “subordinate accounts” (only in case this function is active)

Root accounts with active subordinate account function can create and manage subordinate accounts. This function is only available for the root account itself and not for the subordinate accounts.

The management of the subordinate accounts has 3 main aspects:

• Hierarchical organization of the accounts
• Creation of a new account
• Management of the account settings:
  • for the personal data
  • the authentication
  • the available functions

The subordinate accounts are organized in a tree-hierarchy, where the main branch directly depends from the root account. There can be as many sub-branches as needed by the root account.

Between the root account and the subordinate account the special rights detained by the root account can be passed on totally or partially. But among the subordinate accounts the tree hierarchy is a purely organizational one. There is no transfer of rights from one level of the subordinate accounts to another.

The user of the root account can :

• Select a particular account by clicking on the associated icon
• Create a new account

This tag is the first to be opened when a new account is created. The empty fields have to be filled. When an existing account is opened, the contents of the settings is displayed.

Unlike the root account, the subordinate accounts do no have a section for the billing address, as they always act on behalf of the root account’s organization. The billing address of the root account is automatically used.

The properties of the “Contact” tag are:

• Identification of the contact person
  • Root : to be chosen in the drop-down list. It is the name of the account to which the new account will be attached in the hierarchy.
  • Name : personal name of the user
  • Contact : professional function of the user
  • Telephone : professional phone number
  • Fax : professional fax number
  • Email : professional eMail address
  • Url : professional website URL

• Address of the contact person
  • Line 1 & 2 : address
  • Post code
  • Town
  • Country

The user can:

• Validate the contact person.
  The field's content is tested and eventual errors are announced.
• Go back to the list of subordinate accounts.
  The user is warned that the modifications will be lost and asked if he wants to continue.

The name of the user associated with the account is mentioned on the top of tags to make sure the root account user is well aware of which account he is actually dealing with.

The properties of the login tag are:

• Identification of the contact person
  • User name : code which identifies the user in the geoportal. It has to be a string of at least 6 characters, and has to be unique in the system.
  • Password : contains the password asspociated to the the user name
    
    Here, the root account does NOT type anything.
  • New password : field to define a new password, or the first password in case of new accounts. The field is double, to make sure the password is correctly saved.

The user can:

• Validate the settings
  After successful tests, the new account is created or the setting changes of the account are saved and activated
• Go back to the list of subordinate accounts
  The user is warned that the changes will be lost and is asked if he wants to continue

It has already been mentioned above that when creating new subordinate accounts, the root account can pass on all or part of its special rights to the subordinate accounts. To make things quite simple yet powerful enough, the geoportal offers transfer of rights with the following principles:

• The root account can never grant more rights than it possesses itself. The following examples show cases where the root account does not have certain rights and where the corresponding checkboxes are inactive:
  • Case of a “customer”'s root account
    
  • Case of a root account that does not have access to webservices
    
• The rights granted by the root account are always supplementary rights to the basic rights contained in the « general public » account. This means that when a certain part of the rights for a subordinate account are inactive, it always has as a minimum the rights of the “general public”. In case the root account activates certain rights, this means that the subordinate account possesses the same rights than the root account.
• The transferable rights are grouped in 5 packages that can be switched on or off by the root account.

The following options can be activated:

• See the maps : if this option is switched on, the subordinate account owns the same rights as the root account in terms of extended access in the mapper. This means that he may see more layers, have other scale restrictions and less other restrictions than the “general public”. If this option is switched off, the user has exactly the same rights and contents as the “general public”.
• Products : if this option is switched on, the subordinate account owns the same rights as the root account in terms of extended access in the catalog.
• Create and manage orders : if this option is switched on, the subordinate account’s user can create and manage orders on behalf of his organization.
• Access to OGC webservices : if this option is switched on, the subordinate account can use secured webservices delivering geodata via OGC standards using the account’s user name and password.
• Access to the provider’s functions : if this option is switched on, the subordinate account’s user can create and manage products on behalf of his organization as well as manage the corresponding metadata and incoming orders.

After having logged in, every user can manage his account’s settings. This happens in the menu “my account”. Most of the functions are the same as those already described above for the subordinate accounts.

The properties of this tag are the same as those described above. Aditionnally there are fields for the billing address.

The user can :

• Validate the contact person
• Cancel the changes

The properties of this tag are the same as those described above.

The user can :

• Validate the contact person
• Cancel the ongoing modifications

The customers of the geoportal have access to the functions to create online orders of geoproducts.

The general principle of orders in the geoportal are represented in the following picture :

The online shop can be accessed in the geoportal’s main menu :

The 4-step ordering process is launched by clicking on the button “To Order”.

The 4 steps are:

• Selection of a geoproduct in the catalogue
• Definition of the geographic extent of the order
• Definition of technical and organizational parameters
• Checking & Sending

The authenticated user can manage his orders in the geoportal.

The order overview is opened with the “Trace my orders” button in the menu “Order” :

For every state, the number of requests is indicated in the overview.

If in a certain category no requests exist, the corresponding link is inactive and the indicated number is 0. The corresponding tag text is italic and the link is inactive.

By clicking on one of the active links either in the overview or in the tag titles, the corresponding tags are opened. They contain a table with the order and estimate requests of the category:

• Draft : the order and estimate requests stored in this tag have not yet been sent, but only stored for later use,
• Sent : contains all the order and estimate requests that have been sent by the customer and not yet been returned by the provider in charge,
• Received : the order and estimate requests that have been finished and returned by the providers, and where the results have either been sent by post or made available for a download.
• Archived : the order and estimate requests that have been received, and that the customer wants to keep for later use.

The order and estimate requests in the tag « drafts » are complete or incomplete requests that the customer decides to keep for later use. It is easy to use such a request to rapidly create a new request that can be sent.

The tag looks like this:

The information presented in the list is:

• Number of the request (with a link to the request summary)
• Name of the request
• Type of the request (order or estimate)
• Name of the product
• Saving date

The list is paginated and can be sorted by:

• Request number
• Request name
• Type
• Product name
• Saving date

Based upon an existing request in the list, a new request can be generated by clicking on the button next to the request.

The customer can :

• Click on

The following message appears:

« You are about to create a new order or estimate request based upon the selected request. Do you want to continue ? »

After validation with “OK”, the customer enters the 1st step of the order process. Every information in the 4 steps are kept an can be modified.

• Click on the order number

The request summary is opened in an new window:

In the tag “sent”, all the order or estimate requests that have been sent by the customer are listed.

The information presented in the list is:

• Number of the request (with a link to the request summary)
• Name of the request
• Type of the request (order or estimate)
• Name of the product
• Saving date

The list is paginated and can be sorted by:

• Request number
• Request name
• Type
• Product name
• Saving date

Based upon an existing request in the list, a new request can be generated by clicking on the button next to the request.

In the tag “received” the customer finds the requests after their treatment by the providers. If the result of the order is a downloadable file, the download is done in this tag by clicking on the symbol .

The information presented in the list is:

• Number of the request (with a link to the request summary)
• Name of the request
• Type of the request (order or estimate)
• Name of the product
• Saving date

The list is paginated and can be sorted by:

• Request number
• Request name
• Type
• Product name
• Saving date

Based upon an existing request in the list, a new request can be generated by clicking on the button next to the request.

The downloadable files are contained in one single archive file which can be opened by clicking on the symbol .

The following icons are used to inform the customer on the media used to deliver the ordered products :

• CDROM or DVD :
• Paper format :

The user can :

• Click on the download link
  The following dialog box opens:

• Delete a request
  The following confirmation message appears:
  « You are about to delete the request. Do you want to continue ? »
• Archive the request
  The following confirmation message appears:
  « You are about to archive the request. Do you want to continue ? »

The customer con store his requests in his personal archive.

The information presented in the list is:

• Number of the request (with a link to the request summary)
• Name of the request
• Type of the request (order or estimate)
• Name of the product
• Saving date

The list is paginated and can be sorted by:

• Request number
• Request name
• Type
• Product name
• Saving date

Based upon an existing request in the list, a new request can be generated by clicking on the button next to the request.

For the archived requests, the downloadable files under the symbol remain available for a certain time before they are deleted. From the moment they are deleted, the link disappears but the information concerning the request remains available.

The user can :

• Delete a request
  The following confirmation message appears:
  « You are about to delete the request. Do you want to continue ? »

In the “draft”, “sent”,“received” and “archived” tags of the order overview it is always possible to launch a new order based on an existing order or estimate request in one of the lists.

This can be helpful when doing multiple orders with small differences in the parameters.

The following paragraphs describe the procedure to follow.

In the list, click on the link corresponding to the order you want to base the new order upon.

The following message appears:

After validation with “OK”, the first step of the ordering procedure is launched:

In this step it is possible to select another product.

If you do not want to select another product, you can immediately go further to the following steps:

• With a click on , you open the geographic range selection menu
• With a click on , you enter the order form
• With a click on , you open the final verification and send menu

In each step, the original settings of the order can be modified.

For example, in the order form (step 3), the fields are still filled with the original content, but can be modified to suit the new order. This way, a series of orders can be created very easily and efficiently, which may be useful especially when only few settings differ from one order to another (f.ex. order in shape format, dxf format and dwg format).

In terms of proper organisation, it may be useful not to forget to change the order name.

An authenticated customer can use the search tool to find old requests. This is done by clicking on the “Archive” button in the “order” menu :

The search screen offers the following parameters:

• Provider (list)
• Product (list)
• Type (order or estimate), (list)
• Order state (list)
• Sending date
• Reception date

After the search, the presented information is:

• N° of the order with a link to the order summary
• Product name
• Request type (order or estimate)
• Provider of the product
• Current request state
• Reception date
• Sending date