# Users roles

**URL:** https://discourse.orthanc-server.org/t/users-roles/2298
**Category:** Google Groups archive
**Created:** [January 28, 2021, 11:45am UTC](https://discourse.orthanc-server.org/t/users-roles/2298 "2021-01-28T11:45:35Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Gerom](https://discourse.orthanc-server.org/letter_avatar_proxy/v4/letter/g/ecc23a/32.png) [@Gerom](https://discourse.orthanc-server.org/u/Gerom)
#### Post date: [January 28, 2021, 11:45am UTC](https://discourse.orthanc-server.org/t/users-roles/2298/1 "2021-01-28T11:45:35Z")

</div>

Orthanc is good PACS server, but it no have authentification users by roles. Any user may delete any study . This is bad. Is any way solve this problem? I am using Ubuntu 20.04 LTS. Orthanc is 1.58 version.

---

<div class="post-metadata">

### Author: ![jodogne](https://discourse.orthanc-server.org/user_avatar/discourse.orthanc-server.org/jodogne/32/1511_2.png) [@jodogne](https://discourse.orthanc-server.org/u/jodogne)
#### Post date: [January 28, 2021, 12:33pm UTC](https://discourse.orthanc-server.org/t/users-roles/2298/2 "2021-01-28T12:33:25Z")

</div>

Hello,

There is a FAQ entry about this topic:  
[https://book.orthanc-server.com/faq/improving-interface.html](https://book.orthanc-server.com/faq/improving-interface.html)

Sébastien-

---

<div class="post-metadata">

### Author: ![Gerom](https://discourse.orthanc-server.org/letter_avatar_proxy/v4/letter/g/ecc23a/32.png) [@Gerom](https://discourse.orthanc-server.org/u/Gerom)
#### Post date: [February 26, 2021, 11:43am UTC](https://discourse.orthanc-server.org/t/users-roles/2298/3 "2021-02-26T11:43:16Z")

</div>

Hello  
Correct me please.

Maybe problem will be solved if make change in explorer.js :

function GetAuthorizationTokensFromUrl()  
{

var urlVariables = window.location.search.substring(1).split(‘&’);  
var urlInput = window.location.search.substring(1).split(‘&’,2);  
var username = urlInput [0];  
var dict = {};  
for (var i = 0; i \< urlVariables.length; i++)  
{  
var split = urlVariables[i].split(‘=’);  
if (split.length == 2 && (split[0] == “token” || split[0] == “auth-token” || split[0] == “authorization”))  
{ dict[split[0]] = split[1]; }  
};

if (username == ‘admin’ || username == ‘root’)  
{  
function OpenDeleteResourceDialog(path, title)  
{  
$(document).simpledialog2  
({  
// [http://dev.jtsage.com/jQM-SimpleDialog/demos2/](http://dev.jtsage.com/jQM-SimpleDialog/demos2/)  
// [http://dev.jtsage.com/jQM-SimpleDialog/demos2/options.html](http://dev.jtsage.com/jQM-SimpleDialog/demos2/options.html)  
mode: ‘button’,  
animate: false,  
headerText: title,  
headerClose: true,  
width: ‘500px’,  
buttons :  
{  
‘OK’: {click: function () {DeleteResource(path); }, icon: “delete”,theme: “c” },  
‘Cancel’: {click: function () {} }  
}  
});  
}  
function OpenAnonymizeResourceDialog(path, title)  
{  
$(document).simpledialog2  
({  
mode: ‘button’, animate: false, headerText: title,headerClose: true, width: ‘500px’,  
buttons : {  
‘OK’:  
{  
click: function ()  
{  
$.ajax({ url: path + ‘/anonymize’, type: ‘POST’,  
data: ‘{ “Keep” : [“SeriesDescription”, “StudyDescription”] }’,  
dataType: ‘json’, async: false, cache: false,  
success: function(s) {  
// The following line does not work…  
//$.mobile.changePage(‘explorer.html#patient?uuid=’ + s.PatientID);  
window.location.assign(‘explorer.html#patient?uuid=’ + s.PatientID);  
[//window.location.reload](https://window.location.reload)();  
}  
});  
},  
icon: “delete”, theme: “c”  
},  
‘Cancel’: { click: function () { } }  
}  
});  
}  
};  
return dict;  
};

var authorizationTokens = GetAuthorizationTokensFromUrl();

четверг, 28 января 2021 г. в 18:33:26 UTC+6, [s.jo...@gmail.com](mailto:s.jo...@gmail.com):

---

<div class="post-metadata">

### Author: ![jodogne](https://discourse.orthanc-server.org/user_avatar/discourse.orthanc-server.org/jodogne/32/1511_2.png) [@jodogne](https://discourse.orthanc-server.org/u/jodogne)
#### Post date: [March 4, 2021, 11:27am UTC](https://discourse.orthanc-server.org/t/users-roles/2298/4 "2021-03-04T11:27:50Z")

</div>

Hello,

I don’t know. Just give a try: That’s the power of free and open-source software.

---

<div class="post-metadata">

### Author: ![Gerom](https://discourse.orthanc-server.org/letter_avatar_proxy/v4/letter/g/ecc23a/32.png) [@Gerom](https://discourse.orthanc-server.org/u/Gerom)
#### Post date: [March 4, 2021, 1:27pm UTC](https://discourse.orthanc-server.org/t/users-roles/2298/5 "2021-03-04T13:27:20Z")

</div>

Dear Sebastien  
Can you write how to give username and password directly in url?  
Best regards.

## 

чт, 4 мар. 2021 г. в 17:27, Sébastien Jodogne \<[s.jodogne@gmail.com](mailto:s.jodogne@gmail.com)\>:

---

<div class="post-metadata">

### Author: ![jodogne](https://discourse.orthanc-server.org/user_avatar/discourse.orthanc-server.org/jodogne/32/1511_2.png) [@jodogne](https://discourse.orthanc-server.org/u/jodogne)
#### Post date: [March 4, 2021, 1:36pm UTC](https://discourse.orthanc-server.org/t/users-roles/2298/6 "2021-03-04T13:36:24Z")

</div>

Putting both username and password directly in an URL is bad security practice and should never be done.