Xibo Client User

Setup a separate Xibo user for the client application meetup2xibo. That user will have authorization only to update data in the event dataset. Experienced Xibo administrators can follow this outline:

  1. Add a user to Xibo.
  2. Authorize that user to access the dataset API.
  3. Grant the new user the view and edit permissions for the event dataset.
  4. Add a new application to Xibo, noting the application credentials.
  5. Set the application owner to the new user.

The step-by-step instructions below demonstrate how to setup the client user, dataset permissions, and event editor application.

Add a User for Meetup2xibo

A distinct meetup2xibo client user will provide secure, limited access to the Xibo API. Click the Add User button above the users list, as shown in Figure 20.

Screenshot showing Xibo's user list

Figure 20. Click Users (1) in the Xibo CMS menu to display the users list. Click the Add User button (2) to open the Add User dialog box.

Enter the new user’s user name and password, as shown in Figure 21. Choose any meaningful user name. The password will never be used, so choose a long, random sequence of characters.

Screenshot showing the Xibo Add User dialog box

Figure 21. Type the username (1) and password (2). Click Save (3) to add the new user.

Authorize the User to Access Event Data

The meetup2xibo user requires access to the datasets API, but should be blocked from other API components. Select Page Security from the meetup2xibo user’s popup menu as shown in Figure 22.

Screenshot Xibo's user list with a popup menu open

Figure 22. In the meetup2xibo user’s row, click the down arrow (1) to open the popup menu. Select Page Security (2) from the menu to open the access control list dialog box.

Update the ACL for the meetup2xibo user, as shown in Figure 23

Screenshot showing the access control list for the meetup2xibo user

Figure 23. Click the DataSets checkbox (1) to authorize use of the datasets API. Scroll down and click Save (2) to save the changes.

Grant Dataset Permissions

The meetup2xibo user requires permission to view and edit event data. Select Permissions from the event dataset’s popup menu, as shown in Figure 24.

Screenshot showing Xibo datasets with the popup menu open

Figure 24. Click DataSets (1) in the Xibo CMS menu to display the datasets list. In the event dataset’s row, click the down arrow (2) to open the popup menu. Select Permissions (3) from the menu to open the permissions dialog box.

Authorize the meetup2xibo user to view and edit the dataset, as shown in Figure 25.

Screenshot showing the dataset permissions dialog box

Figure 25. In the row for the meetup2xibo user, click the View (1) and Edit (2) checkboxes. Click Save (3) to save the changes.

Add an Application for Meetup2xibo

Xibo limits API access to a limited list of client applications. Click the Add Application button above the applications list as shown in Figure 26.

Screenshot showing the Xibo applications list

Figure 26. Click Applications (1) in the Xibo CMS menu to display the applications list. Click the Add Application button (2) to open the Add User dialog box.

Enter the new application’s name, as shown in Figure 27. Choose any meaningful application name.

Screenshot showing the Add Application dialog box

Figure 27. Enter the application name (1). Click Save (2) to add the new application.

Authorize the Application

The new application must allow API access from the unattended application meetup2xibo. Select Edit from the meetup2xibo application’s popup menu as shown in Figure 28.

Screenshot showing the application list with the popup menu open

Figure 28. In the meetup2xibo application’s row, click the down arrow (1) to open the popup menu. Select Edit (2) from the menu to open the Edit Application dialog box.

The Xibo CMS API credentials configuration requires the client ID and secret shown in the Edit Application dialog box. Authorize the client credentials, as shown in Figure 29.

Screenshot showing the Edit Application dialog box.

Figure 29. Note the client ID (1) and client secret (2) for the meetup2xibo configuration. Click the Client Credentials? checkbox (3) to authorize OAuth2 client credentials. Do not save yet.

The meetup2xibo application require access to the entire Xibo scope. Grant access and associate the application with the meetup2xibo user, as shown in Figure 30.

Screenshot showing the permissions tab of the Edit Application dialog box.

Figure 30. Click the Permissions tab (1) to display the application permissions. Click the All access checkbox (2) to grant the application access to the entire scope. Select the meetup2xibo user from the pulldown menu (3) to assign an application owner. Click Save (4) to save the changes.