Hi Fritz,
by central user management, do you mean that you are trying to share users between different OMERO installations? Or more like LDAP integration?
In any event, the tables which define user management in OMERO are:
- experimenter
- groupexperimentermap
- experimentergroup
Each groupexperimentermap represents a users member in a group. There are two special groups, or roles: "user" and "system". Membership in "system" makes a user an administrator, and allows access to privileged API methods (The ones marked with @RolesAllowed("system")). Membership in "user" marks an active user with access to the rest of the API methods. Taking a user out of the "user" group, then, will deactivate them.
An alternative method for deactivating a user is by setting the password to null. This value is stored in the "hash" field of the "
password" table, where "experimenter_id" is a foreign key for "id" of the "experimenter" table. (Note: an empty password hash permits passwordless login)
Hope that helps!
~Josh.
