USER MANAGEMENT
This documentation is provided or made accessible "AS IS" and "AS AVAILABLE" and without condition,
endorsement, guarantee, representation, or warranty of any kind and IDimager Systems assumes no
responsibility for any typographical, technical, or other inaccuracies, errors, or omissions in this documentation.
IDimager System reserves the right to periodically change information that is contained in this documentation.
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
Introduction
Photo Supreme is “Digital Asset Management” software. Photo Supreme makes it possible
to manage your image files by categorizing them. It will categorize the files based on the
available details of the file, this includes technical photo details, but also the location of the
file on disk, etc. Apart from those properties you can add tags to the images, enrich the files
with descriptions, or add custom information. This may sound like a very time-consuming
task, but once you have worked yourself through that, you will benefit from the many
advantages. With Photo Supreme at hand, you will be able to quickly retrieve your images
using all kinds of criteria or combinations.
The PostgreSQL version of Photo Supreme Server is available for Windows as well as macOS
platforms. As its name suggests, this version uses the popular open-source database system
PostgreSQL. PostgreSQL is a free and open-source object-relational database management
system with an emphasis on extensibility and standards-compliance. A database server its
primary function is to store data, securely and supporting best practices, and retrieve it later,
as requested by other software applications, be it those on the same computer or those
running on another computer across a network (including the Internet). It can handle
workloads ranging from small single-machine applications to large Internet-facing
applications with many concurrent users. Recent versions also provide replication of the
database itself for security and scalability. [source: WikiPedia]
The SQLServer version of Photo Supreme Server is only available for Windows and macOS
platforms and, as its name suggests, uses Microsoft SQLServer as the database system.
Microsoft SQLServer is a relational database management system developed by Microsoft
Inc. The database software requires a Windows operating system. With Photo Supreme you
can connect to the database from Windows and MacOSX operated systems. As a database,
SQLServer is a software product whose primary function is to store and retrieve data as
requested by other software applications, be it those on the same computer or those
running on another computer across a network (including the Internet). There are at least a
dozen different editions of Microsoft SQL Server aimed at different audiences and for
different workloads (ranging from small applications that store and retrieve data on the
same computer, to millions of users and computers that access huge amounts of data from
the Internet at the same time). [source: WikiPedia]
This manual assumes that you have already successfully installed either PostgreSQL or
SQLServer and Photo Supreme Server and that you can start Photo Supreme and can
successfully connect to the database. The manual describes how to administrate Photo
Supreme when there are multiple users who need to connect to the same catalog/database.
USER MANAGEMENT
Photo Supreme allows you to grant access to multiple users. Each user can get his/her own
role in the application. The application supports three types of user roles.
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
1. The Administrator role
The Administrator role is the type of user who typically administers the database,
installs updates, creates/updates/deletes users, assigns user roles, runs backups, and
restores. The Administrator role is unrestricted when it comes to Photo Supreme
features.
2. The Catalog Manager role
The Catalog Manager role is the type of user who is responsible for the content of the
database. The Catalog Manager can perform every task inside the application, except
for system maintenance tasks like install updates, run backups/restores, manage
users.
3. The Catalog Browser role
The Catalog Browser role is the type of user who can only “view” the content of the
database as created by the Catalog Manager(s). A user with the Catalog Browser role
is not allowed to alter the content of the database.
To access the User Management feature: select Tools -> User Management from the
application’s Hamburger menu (only available when a Photo Supreme Administrator logs in).
As you, as the main administrator, logs in for the first time you use the default login
password: master2004. It is highly recommended that you first change your password to
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
something private. Change the password by clicking on the user’s drop-down icon and select
“Reset Password” from the context menu.
Enter your new password, verify it with a repeated password and click OK to store the new
password.
Create a new user
Creating a new user can be done by clicking the plus (+) button in the lower left corner.
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
Enter the details of the new user.
User Name Enter the login name of the new user. Choose this name carefully
because it can’t be changed afterwards.
User Password By default, a new user uses the password welcome. Click the […]
button in the password field to set a custom password.
Full Name Enter the complete name of the user.
User Group If this user inherits its user rights from an existing User Group,
then select this User Group here.
Access Level Assign the appropriate role to the user.
Can delete files from Tick this box if this user can delete files from disk using Photo
disk Supreme.
Can remove files from Tick this box if you want this user to be able to remove files that
catalog are previously added to the catalog.
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
View on the Catalog It is possible to restrict access for each user to a subset of the
catalog. You can specify exactly what this user can see and what
not.
Even for Catalog Managers it is possible to restrict access. In
some organizations there are separate Catalog Managers who
each manager their own dedicated set of images.
Options are:
1. Can see the Full Catalog
2. Restrict Catalog View
What can be seen If you have set a restricted view on the catalog, then this is where
you can select which data is accessible to this user.
Click the Plus Button and tick the boxes of those items that can be
seen. Keep in mind that ticking a box for an item with subitems
then the user will also be able to access the sub items.
In this sample, this user can see all images in the “Objects”
category, that have a “4 or 5 star” rating and that were shot in
2018
What cannot be seen As in “what can be seen” you can also exclude certain items from
the catalog. These excluded items will not be displayed to the
user, even if these occur for items in that the user can see
according to the “What can be seen” definition.
CLICK OK TO STORE THE USER. YOU’LL THEN RETURN TO THE USER MANAGEMENT DIALOG. JANE DOE IS NOW
ABLE TO ACCESS THE APPLICATION WITH THE PASSWORD PROVIDED .
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
DELETE A USER
Deleting a user is a matter of right clicking on the user and delete “Delete this User” from
the context menu. When a user is deleted, the content of that user is migrated to the main
administrator, so nothing will be lost.
LICENSE MANAGEMENT
Photo Supreme is licensed on a per concurrent user base, meaning that for each user that
concurrently logs in, a license is required. Concurrent Users means “simultaneously logged in
users”. So, if your department or business has 20 employees that need access to the catalog,
but only 5 will do so concurrently then you only need 5 licenses. The application maintains
the licenses that you purchased in the License Pool. As the administrator you add each
purchased license to the License Pool. When a user logs in, the application assigns an
available license from the License Pool to that user. And when the user then closes the
application, the license is released to the pool and becomes available for the next user to
login.
The Main Administrator License
To prevent the main administrator (you?) from being locked out due to unavailable licenses,
the administrator needs one dedicated license. This license is not used in the License Pool.
You can download your license files from the User Control Panel at https://cp.idimager.com.
The first license that is loaded in the User Management feature becomes the dedicated
administrator license.
The License Pool
The User Management dialog displayed the number of licenses in the Pool and how many
licenses are currently in use and how many are available.
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
After purchase you’ve receive your (series of) licenses in the User Control Panel at
https://cp.idimager.com. Download each of the licenses there and store them to a
temporary folder on your hard drive.
To read your licenses to the database, click the button “Load User Licenses”. A file selection
dialog opens. Navigate to the folder that contains your downloaded licenses and select each
of the licenses (you can select multiple files in the dialog). Then click “Open” to import the
licenses to the Pool.
As an authorized user logs in, they get a license
assigned from the License Pool. You can monitor the
counts in the User Management dialog. Please be
aware that the counts update with a short delay of 30
seconds.
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
WINDOWS ACTIVE DIRECTORY
Within a Windows network environment, it is possible to use Active Directory together with
Photo Supreme (6.3.5 and up).
NOTE: To use Active Directory logins, you need at least 2 Photo Supreme Server licenses.
To enable the Active Directory support, you should start Photo Supreme with the -AD
parameter. Example:
C:\Program Files\IDimager Products\Photo Supreme 6 PostgreSQL\IDimagerSU.exe -AD
Configure your Photo Supreme application deployment script to add this -AD parameter to
the executable.
Windows User Group configuration
Tip: Start the Windows User Manager by using the Run command and there enter
lusrmgr.msc
Create a new Windows User Group with the following details:
Name: PhotoSupreme
Description: See the settings in the table below.
Tip: One setting per line; tip: if needed, press Ctrl+Enter for a new line (also see the tip
below the table).
HostName=<<database hostname>>
Port=<<database port>>
DataBase=<<database name>>
SingleSignOn=<<Boolean setting>>
Example for a PostgreSQL database:
HostName=192.168.1.128
Port=5432
DataBase=photosupreme
SingleSignOn=True
HostName Enter the network address of the server or computer that has the
database (PostgreSQL or SQLServer) installed
Port Enter the port number of the database instance. Default for
PostgreSQL is 5432, and for SQLServer is 1433
DataBase Enter the name of the Photo Supreme database (default is
photosupreme)
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
SingleSignOn Single Sign On allows a user to use the software without having to
enter a password. Their Windows login qualifies them to also
access Photo Supreme.
Set this to True or False.
If omitted, then this will be False.
Every member of the PhotoSupreme group will be able to login to the software using their
Windows password.
Windows Users who need to use Photo Supreme should be added as a member of this
PhotoSupreme group.
Tip: If you cannot add separate lines in the description, and Ctrl+Enter also doesn’t work
then you can use a comma separated option. In that case use the CSV: prefix (including the
colon).
Example with a CSV configuration string:
CSV:”HostName=192.168.1.128”,”Port=5432”,”DataBase=photosupreme”,”SingleSignOn=T
rue”
Note the double quotes wrapping every value.
Active Directory with User Group configuration
In Photo Supreme it is possible to define user groups and per User Group you can define the
access conditions (e.g., Catalog Browser having access to only the 2021 pictures). When
using Active Directory then you can define additional Windows User Groups that share the
same name as the User Group in Photo Supreme but prefixed with PhotoSupreme.
For example: there is a Photo Supreme User Group named “Best of 2021”. For a Windows
user that you would like to use this User Group, then create a Windows User Group
PhotoSupreme.Best of 2021
Make the Windows User a member of this Windows User Group. This Windows User would
eventually be a member of the Windows User Groups PhotoSupreme (so that the user can
start Photo Supreme, and PhotoSupreme.Best of 2021 (for the user’s extra authorization
restrictions).
Note: in Photo Supreme, a user can only be part of one User Group.
© 2022 IDimager Systems
DOCUMENT VERSION 0.75
