Survey authorization process

See this topic for information about IBM® Survey Creator's authorization process.

IBM Survey Creator uses an authorization process to verify that users are allowed to either take or own a survey based on properties specified by survey administrators and owners. The survey authorization process works as follows:

Survey administrators

IBM Survey Creator does not perform special authorization for survey administrators attempting to enter the survey application. All users with a valid entry in the Administrator group of the LDAP server are automatically granted survey administrator authority after successful authentication.

Survey owners

IBM Survey Creator performs an authorization check to verify that the user is defined as having survey owner authority by the survey administrator. A user can have a valid LDAP entry and pass through the authentication phase, but not be defined as a user with survey owner privileges. A survey administrator must add a users to the Survey Owners box on the Survey Creator Administration page for that user to have survey owner authority.

Survey takers

IBM Survey Creator performs authorization checks based on properties defined by the survey owner. This application allows a survey owner to distinguish who has access to take a survey through the Require participants to login before taking the survey property. When a user attempts to take a survey that requires a login procedure, the application performs an authorization check to verify the user is not in the list of restricted users or is in the list of allowed users. Authorization verifies that the user has not already taken the survey before presenting the user with the survey form. If the Require participants to login before taking the survey property is not selected, authorization checks are not performed on survey takers and survey takers can take the survey multiple times.