UMS Photo: Difference between revisions

From UmsWiki
Jump to navigation Jump to search
← Older edit
Visual
Khm (talk | contribs)
Bureaucrats, engineering, Administrators
132 edits
No edit summary
No edit summary
 
(17 intermediate revisions by 6 users not shown)
Line 1: Line 1:
UMS FOTO er en foto løsning til skoler og uddannelsesinstitutioner som bruger UMS. UMS FOTO gør det nemt, altid at have opdateret fotos på de studerende og ansatte. Det hele styres igennem UMS, og er nemt, hurtigt og intuitivt.
UMS Photo is a photo solution for schools and educational institutions that use UMS. UMS Photo makes it easy to always have updated photos of students and employees.  


UMS FOTO giver brugerne mulighed for selv at opdatere deres studiebilleder, der hvor det passer dem, når det passer dem og på den enhed de lige har ved hånden. Dette betyder at det er lige meget om du er ved en computer, bruger UMS App på din telefon eller om det er den søde kontordame der tager dit billede.
Everything is managed through UMS, and is easy, fast and intuitive.


Når billedet er blevet taget og sendt op til UMS skal det igennem en godkendelse, skolen bestemmer selv hvem der skal godkende billeder og om de overhovedet vil have godkendelsestrinet med.
UMS Photo allows users to update their student pictures from mobile device ('''MEA APP''') or webcam ('''UMS Web''').  


== Prerequisites ==
When the picture has been uploaded to UMS, it will enable an approval process, the approval process can be "human" or "automatic".


=== Supported administrative systems ===
==Prerequisites==


=== Module requirements ===
===Module requirements===


=== Additional functionality ===
==Installation==
To set up UMS Photo, go to '''Web setup''' in the Configurator.


=== Testing after setup ===
==== Setting UMS Photo : ====


=== What to have ready ===
* "'''Save pictures with SSN'''" - Automatic saving uploaded pictures with SSN as filename. (not recommended)


=== Is any physical item required ===
* "'''Auto approve photos'''" - Automatic approval discards the manual approval process. (uploaded pictures will be placed in "'''Approved'''" folder by system)


=== Should third party be contacted ===
* "'''Image path'''" - Insert UNC or shared path where uploaded pictures will be placed. (default pictures will be saved in '''[image path]\pending''')


== Installation ==
* "'''Service account to use to access image path'''" - Select a "serviceaccount" that has access to "image path". (Create/delete/modify access required) 
For at sætte UMS FOTO op skal vi et smut forbi Web setup i configuratoren. Der er et punkt som hedder UMS FOTO, hvor man kan slå de forskellige funktioner til og fra, som lyster. ”Enable selfie in userinfo” – giver brugerne mulighed for at selv at opdatere deres billede via bruger info modulet. Hvorimod at ”Enable selfie in app” giver mulighed for at opdatere billedet via UMS App.
''NB : The user creating the setting must also have minimum (read access) to "Image path in order to setup.''
* "'''Selfie'''" - The Selfie Access group is a security group in Active Directory granting access in UMS Web - Controlpanel to approve uploaded images. 
''NB : Only applies if "Auto approve photos" is not enabled.''


Derudover skal vi specificere et sted at ligge de uploadet billeder, og en service account som har rettigheder til at skrive i de angivet mapper.
[[File:UMS Photo settings.png|none|thumb|459x459px]]


Selfie Access group er en sikkerheds gruppe i Active directory som bestemmer hvem der må godkende og se uploadet billeder.
[[File:Photowebsetup.png|none|thumb]]


Nu har vi fået sat det grundlæggende op for at få UMS FOTO til at virke, nu skal vi fortælle UMS hvor den skal finde de godkendte billeder, som skal flyttes over.
After setup of UMS Photos the IIS-server must be reset (iisreset). This will create 3 folders in addition to "image path".


Dette gøres under Settings -> Picture libraries
* Pending
[[File:Photopicturelibrary.png|none|thumb]]
* Approved
* Rejected


Her ses et eksempel på hvordan de sættes op.
''NB : Only works if the selected service-account selected has (create/delete/modify) rights on the image path''


Når man har valgt sin sti, i vores tilfælde har vi valgt at ligge vores selfie billeder på [:File://file/d$/Development/AlfSite \\file\d$\Development\AlfSite] - systemet opretter så selv en rækker mapper inde under den folder.
==== Picture Libraries : ====
Picture libraries setting is used to configure where UMS (or 3rd party software) can "collect" pictures.
[[File:Picture Libraries 1.png|none|thumb]]
In the above example a setting for employees and students have been created (recommended)


Der bliver oprettet tre mapper:
==== Setting up Picture Library ====
[[File:Picture Libraries.png|none|thumb]]


Approved – til alle de godkendte billeder, ingen billeder bliver lagt her, før de er blevet godkendt igennem godkendelses systemet på UMS Web.
* '''Description''' - Name the setting
* '''LibraryType''' - Will determine whether used for ExportPictures2Adminsystem (Employees or students)
* '''Students table field to use''' - Select a field to use for filename of pictures ('''Studienr''' or '''SLI_ID''' recommended)
* '''Username''' - Username of service-account used for this setting (service-account from UMS Photos can be used here)
* '''Password''' - Password of service-account
* '''Domain''' - Domain of the service-account
* '''Select path''' - Browse to the image path ''NB : If UMS Photo is enabled / used, the "Approved" folder must be included in "select path" as shown in example''


Rejected – Til alle de billeder som ikke er blevet godkendt, bliver lagt med en dato for hvornår de er blevet afvist.
===== Picture libraries used by which job / systems? =====


Pending – Det er den folder som alle ventende billeder bliver lagt i.
* '''CopyPictures2Web''' - This job collects approved pictures in "'''[image path]'''\'''approved'''" and copies to setting '''''Web Setup - Pictures''''' path
* '''ExportPicturestoAdminsystem''' - Some systems that allows upload of pictures will also use this path for upload. (e.g Office365, Active Directory) ''NB : This feature is setup in the systems adminserver setting. (where available)''


Så hvis man ikke vil have godkendelse af billeder, kan man vælge pending mappen i stedet for. Så springer man hele godkendelsesdelen over.


=== UMS Web – Bruger info ===
[[File:Photouserinfo.png|none|thumb]]


Hvis UMS Foto er slået til på brugerinfo, vil man, når man er i gang med at rette sine oplysninger, få mulighed for at selv at uploade et billede til godkendelse.
== Where can users upload pictures from? ==


=== UMS Web – Velkomst modul ===
==== UMS Web – Brugerinfo / Userinfo / Selfie ====
Det er også muligt at bruge UMS Velkomst til at uploade nyt billede i forbindelse med skolestart.
[[File:Photouserinfo.png|none|thumb|636x636px]]


Når man har sat siden ”update photo” ind i velkomst modulet, bliver brugerne vist en side hvor deres aktuelle billede vises, og hvor der er mulighed for at opdatere dette.
If ''Selfie'' is enabled on user information, users will be able to upload a picture for approval.


Billedet bliver lagt i samme mappe som de andre billeder som venter på godkendelse.
==== UMS Web – Velkomst modul / Intro ====
[[File:Photowelcome.png|none|thumb]]
[[File:Photowelcome.png|none|thumb|636x636px]]


På sigt kommer der mulighed for at skrive nogle retningslinjer som bliver vist her.
It is also possible to use UMS Welcome to upload a picture when onboarding.


=== UMS Web Tag billede ===
When you have inserted the "'''update photo'''" page into the welcome module, users are shown a page with option to update their picture.
Derudover er der mulighed for at tage billeder af de studerende ved hjælp af et webcam, dette gøres i kontrolpanelet.


Når man har søgt en bruger fra, vælger man tag billede, og der kommer en popup op, hvor man bliver bedt om at aktivere kameraet via browserens sikkerhedsstyring.
''NB : Requires "selfie" enabled in "Userinfo" setting''


Når man har tændt kameraet er det bare at tage billedet, og billede er godkendt og sendt videre i systemet.
===UMS Photobooth===
[[File:Photopicture.png|none|thumb]]
Additionally, there is the option to take pictures of students using a webcam, which is done through the control panel.[[File:Photocontrolpanel.png|none|thumb|567x567px]]Once you have searched for a user, you select "take picture," and a popup appears where you are asked to activate the camera through the browser's security settings.[[File:Phototakepicture.png|none|thumb|567x567px]]Once you have turned on the camera and taken the picture, it will go through the approval process.[[File:Photopicture.png|none|thumb|636x636px]]


Denne funktion kræver at der bruges en moderne browser, som f.eks nyeste version af Google Chrome eller Firefox. Internet Explorer er i gang med at udvikle deres, så de også kan være med. Dog er det uvist hvornår dette er tilgængeligt.  
===UMS App===
To gain access to upload a selfie picture, the setup in the configurator must be in place and the selfie option enabled for the app.


=== UMS Photobooth ===
* Your information -> Edit and selecting "Take picture" or "Choose from photos" where you select from your device gallery.
Giver det administrative personale mulighed for at tage billeder af de studerende, således bliver de opstillede fotobokse overflødige og billedet kan godkendes med det samme.


I kontrolpanelet forfindes
[[File:Photocontrolpanel.png|none|thumb]]
[[File:Phototakepicture.png|none|thumb]]
[[File:Phototakepicture2.png|none|thumb]]
=== UMS App ===
For at få adgang til at uploade et selfie billede skal opsætning i configuratoren være på plads og selfie slået til for app’en. Man tager et billede på mobilen ved at gå ind i Dine oplysninger -> Rediger og vælger ”Tag billede” eller ”Vælg fra fotos” hvor man vælger fra sit galleri.
[[File:Photoapp1.png|none|thumb]]
[[File:Photoapp1.png|none|thumb]]
[[File:Photoapp2.png|none|thumb]]
[[File:Photoapp2.png|none|thumb]]
[[File:Photoapp3.png|none|thumb]]


Når billedet er uploaded vises en information til brugeren at billedet nu er uploaded og venter på godkendelse.
== Approval process ==
 
==== Human interaction ====
''NB : This option requires that user with approval-rights via access group ALSO is present in UMS students table.''[[File:Photoacceptpictures.png|none|thumb|571x571px]]
 
All images awaiting approval can be found under the "Controlpanel" -> "Student Pictures".
 
There you can see the active picture, the pending picture and the upload time.
 
When you want to approve a picture, you press the green check mark. If a picture is rejected, press the red cross.
[[File:UMSPhotoDeny.png|none|thumb|615x615px]]
A box appears where you have the option to feedback to user why the picture has not been approved.
 
''NB : That message is sent out as an SMS if you have that setup, otherwise it sends an email to the user.''
 
==== Automatic approval ====
If automatic approval is enabled the uploaded images will be placed directly in "Approved" folder (e.g "'''image path\approved'''")
 
==Technical settings==
 
==UMS Photo and UMS Frontend in DMZ==
When the UMS Frontend server is placed inside the DMZ, theres no need to have the pictures inside the domain, unless you have some kind of student card printer.
 
So one way is to place the pictures on a UNC share created on the DMZ frontend server. When this is created, you need to create a domain account using SQL.
Use the following:
 
INSERT INTO DomainAccounts (Description, DomainUser, DomainPassword, Domain, ShowOnWeb) VALUES ('Description', 'DomainUser', 'DomainPassword', 'Domain', 0)
 
You need to specify the computername of the frontend server in the domain column for this domain account.
 
Description: The Description of DomainAccount
DomainUser: Username for the user used to connect to the UNC path
DomainPassword: The password used to connect to the UNC path
Domain: This must be set to the computername of DMZ frontend server
ShowOnWeb: Should this DomainAccount be used on the login page? In this case, NO!
 
Now go inside the configurator, select Web Setup, Select UMS Photo and now select the newly created DomainAccount.
 
-- picture --


=== Godkendelse af billeder ===
Restart the information service on the frontend server.
[[File:Photoacceptpictures.png|none|thumb]]


Alle billeder som afventer godkendelse findes under kontrolpanelet under punktet ”Studiebilleder”.
Open the Event Viewer and check for errors, if none and the site starts, you can now test that your pictures is uploaded and located on the frontend server.


Der kan du se det aktive billede, afventende billede og tidspunkt for upload. Når du klikker på et af billederne, kommer det op stort.
Hereafter you'll need to get pictures from the UNC share into the UMS folder.


Når man vil godkende et billede, trykker man på det grønne flueben, og næste gang servicen kører, bliver billedet lagt over i ums.
The easiest way to do this, is to create a small .bat file containing:
xcopy c:\pictures\Approved\*.jpg c:\inetpub\wwwroot\Pictures /s /y
xcopy c:\pictures\Approved\*.jpeg c:\inetpub\wwwroot\Pictures /s /y


Hvis et billede er for frækt til at blive godkendt, trykker man på det røde kryds.
and then trigger the bat file using Scheduled task inside windows.
[[File:Photoallpictures.png|none|thumb]]


Så kommer der en boks op, hvor man har mulighed for at give brugeren en forklaring på hvorfor billedet ikke er blevet godkendt. Den meddelelse bliver sendt ud som en SMS, hvis man har det ellers sender den en mail til brugeren.
Last remarks:


== Technical settings ==
Do NOT use CPR for UMS Photo when deploying this setup.
Do NOT put UNC path inside wwwroot folder.
Handle the account like any other DomainAccount or Service Account - With care!


== UMS Photo and UMS Frontend in DMZ ==
==FAQ==
To bypass service


<nowiki>
'''Iphone does not present pictures available in Pictures folder?'''
INSERT INTO DomainAccounts (Description, DomainUser, DomainPassword, ShowOnWeb) VALUES ('Description', 'DomainUser', 'DomainPassword', 0)
</nowiki>


<code>INSERT INTO DomainAccounts (Description, DomainUser, DomainPassword, ShowOnWeb) VALUES ('Description', 'DomainUser', 'DomainPassword', 0)</code>
If the UMS Frontend is installed on a Windows Server 2008 R2, the TLS version 1.2 must be enabled.


== FAQ ==
We highly recommend upgrading your UMS servers to run Windows 2016 to have features enabled default.

Latest revision as of 12:34, 14 March 2025

UMS Photo is a photo solution for schools and educational institutions that use UMS. UMS Photo makes it easy to always have updated photos of students and employees.

Everything is managed through UMS, and is easy, fast and intuitive.

UMS Photo allows users to update their student pictures from mobile device (MEA APP) or webcam (UMS Web).

When the picture has been uploaded to UMS, it will enable an approval process, the approval process can be "human" or "automatic".

Prerequisites

Module requirements

Installation

To set up UMS Photo, go to Web setup in the Configurator.

Setting UMS Photo :

  • "Save pictures with SSN" - Automatic saving uploaded pictures with SSN as filename. (not recommended)
  • "Auto approve photos" - Automatic approval discards the manual approval process. (uploaded pictures will be placed in "Approved" folder by system)
  • "Image path" - Insert UNC or shared path where uploaded pictures will be placed. (default pictures will be saved in [image path]\pending)
  • "Service account to use to access image path" - Select a "serviceaccount" that has access to "image path". (Create/delete/modify access required)

NB : The user creating the setting must also have minimum (read access) to "Image path in order to setup.

  • "Selfie" - The Selfie Access group is a security group in Active Directory granting access in UMS Web - Controlpanel to approve uploaded images.

NB : Only applies if "Auto approve photos" is not enabled.


After setup of UMS Photos the IIS-server must be reset (iisreset). This will create 3 folders in addition to "image path".

  • Pending
  • Approved
  • Rejected

NB : Only works if the selected service-account selected has (create/delete/modify) rights on the image path

Picture Libraries :

Picture libraries setting is used to configure where UMS (or 3rd party software) can "collect" pictures.

In the above example a setting for employees and students have been created (recommended)

Setting up Picture Library

  • Description - Name the setting
  • LibraryType - Will determine whether used for ExportPictures2Adminsystem (Employees or students)
  • Students table field to use - Select a field to use for filename of pictures (Studienr or SLI_ID recommended)
  • Username - Username of service-account used for this setting (service-account from UMS Photos can be used here)
  • Password - Password of service-account
  • Domain - Domain of the service-account
  • Select path - Browse to the image path NB : If UMS Photo is enabled / used, the "Approved" folder must be included in "select path" as shown in example
Picture libraries used by which job / systems?
  • CopyPictures2Web - This job collects approved pictures in "[image path]\approved" and copies to setting Web Setup - Pictures path
  • ExportPicturestoAdminsystem - Some systems that allows upload of pictures will also use this path for upload. (e.g Office365, Active Directory) NB : This feature is setup in the systems adminserver setting. (where available)


Where can users upload pictures from?

UMS Web – Brugerinfo / Userinfo / Selfie

If Selfie is enabled on user information, users will be able to upload a picture for approval.

UMS Web – Velkomst modul / Intro

It is also possible to use UMS Welcome to upload a picture when onboarding.

When you have inserted the "update photo" page into the welcome module, users are shown a page with option to update their picture.

NB : Requires "selfie" enabled in "Userinfo" setting

UMS Photobooth

Additionally, there is the option to take pictures of students using a webcam, which is done through the control panel.

Once you have searched for a user, you select "take picture," and a popup appears where you are asked to activate the camera through the browser's security settings.

Once you have turned on the camera and taken the picture, it will go through the approval process.

UMS App

To gain access to upload a selfie picture, the setup in the configurator must be in place and the selfie option enabled for the app.

  • Your information -> Edit and selecting "Take picture" or "Choose from photos" where you select from your device gallery.

Approval process

Human interaction

NB : This option requires that user with approval-rights via access group ALSO is present in UMS students table.

All images awaiting approval can be found under the "Controlpanel" -> "Student Pictures".

There you can see the active picture, the pending picture and the upload time.

When you want to approve a picture, you press the green check mark. If a picture is rejected, press the red cross.

A box appears where you have the option to feedback to user why the picture has not been approved.

NB : That message is sent out as an SMS if you have that setup, otherwise it sends an email to the user.

Automatic approval

If automatic approval is enabled the uploaded images will be placed directly in "Approved" folder (e.g "image path\approved")

Technical settings

UMS Photo and UMS Frontend in DMZ

When the UMS Frontend server is placed inside the DMZ, theres no need to have the pictures inside the domain, unless you have some kind of student card printer.

So one way is to place the pictures on a UNC share created on the DMZ frontend server. When this is created, you need to create a domain account using SQL. Use the following: 

INSERT INTO DomainAccounts (Description, DomainUser, DomainPassword, Domain, ShowOnWeb) VALUES ('Description', 'DomainUser', 'DomainPassword', 'Domain', 0)

You need to specify the computername of the frontend server in the domain column for this domain account.

Description: The Description of DomainAccount DomainUser: Username for the user used to connect to the UNC path DomainPassword: The password used to connect to the UNC path Domain: This must be set to the computername of DMZ frontend server ShowOnWeb: Should this DomainAccount be used on the login page? In this case, NO!

Now go inside the configurator, select Web Setup, Select UMS Photo and now select the newly created DomainAccount.

-- picture --

Restart the information service on the frontend server.

Open the Event Viewer and check for errors, if none and the site starts, you can now test that your pictures is uploaded and located on the frontend server.

Hereafter you'll need to get pictures from the UNC share into the UMS folder.

The easiest way to do this, is to create a small .bat file containing: 

xcopy c:\pictures\Approved\*.jpg c:\inetpub\wwwroot\Pictures /s /y
xcopy c:\pictures\Approved\*.jpeg c:\inetpub\wwwroot\Pictures /s /y

and then trigger the bat file using Scheduled task inside windows.

Last remarks:

Do NOT use CPR for UMS Photo when deploying this setup. Do NOT put UNC path inside wwwroot folder. Handle the account like any other DomainAccount or Service Account - With care!

FAQ

Iphone does not present pictures available in Pictures folder?

If the UMS Frontend is installed on a Windows Server 2008 R2, the TLS version 1.2 must be enabled.

We highly recommend upgrading your UMS servers to run Windows 2016 to have features enabled default.

Retrieved from "http://wiki.inlogic.dk/index.php?title=UMS_Photo&oldid=5170"