The ImageServer supports user management in two modes: stand-alone and Enterprise. In stand-alone mode, the ImageServer uses an xml file to store the login information for a single user, which is configured during install time. Enterprise mode allows for multiple users to be added to the system and for each user to be part of various user groups. Each group has a set of authority tokens associated with it which enables different functionality of the Web UI. These tokens are applied in three ways to the Web UI: at the page level, menu level and at the control level. At the page level, if a user does not have permission to view a page, they will be presented with an error message. At the menu level and control level, menu items and buttons will be hidden based on the authority tokens that a user has as part of their profile.
After a user successfully logs in, they will be directed to a default page base on the tokens they have as part of their profile. This will typically be either the User Management page or the Studies page. The ClearCanavas login splash screen, below, is presented when any attempt is made to access a page of the ImageServer and a session hasn't yet been created.

When a user first logs in or their password has been reset, they will be asked to enter a new password. For the Enterprise version, the default password is assigned by the Enterprise Server. Please consult the Enterprise Server documentation for more details. For the stand-alone version, the default username and password is specified at install time. After entering a new password, the user will be redirected to their default page.

Clicking "Change Password" will bring up the change password dialog and allow the user to change their password.

Invalid username/password errors are displayed below the splash screen.

If a user after successfully logging in, tries to access a page that they don't have access to, they will receive the message below and can either logout or go to their default page.
