Users

Screen

Module

Administration

Menu path

Yönetim › Kullanıcı ve Roller › Kullanıcılar (Administration › Users and Roles › Users)

Screen route

/users

Required permission

users.view

The list of accounts that sign in to CoreX ERP. Creating accounts, assigning roles, defining person-specific permissions and restrictions, password and lock tasks, and closing accounts are all done from this screen.

Users list

1. 1New User — opens an account by invitation or password
2. 2Search by name or e-mail
3. 3Role filter
4. 4Status: Active · Inactive (disabled) · Locked · All
5. 5Row: name, roles and account (e-mail)
6. 6Actions — edit, permissions, password, disable

List

Column	Content
Ad (Name)	Full name. If no name was entered, "Ad girilmemiş" (No name entered). The status badge is shown next to it (see below).
Roller (Roles)	The roles assigned directly to the user. If there is an organizational restriction, a summary such as "Kısıtlı: 2 depo · 1 iş merkezi" (Restricted: 2 warehouses · 1 work center) appears below. Roles that come from the unit are not shown here.
Hesap (Account)	Email — the sign-in ID.
İşlem (Action)	The İşlemler (Actions) menu.

Filter	Behavior
Ara (Search)	Text contained in the name or email ("Ad ya da e-posta ara…" — Search name or email…).
Rol (Role)	A single role; searchable list.
Durum (Status)	Aktif (Active; default) · Pasif (devre dışı) (Inactive (disabled)) · Kilitli (Locked) · Tümü (All). In the address: ?durum=devre-disi, ?durum=kilitli, ?durum=tumu.

Badge	Meaning
Devre dışı (Disabled; red)	The account has been closed; it cannot sign in. The record has not been deleted.
Kilitli (Locked; yellow)	Locked after repeated failed password attempts; unlocks automatically when the period expires.
Davet bekliyor (Invitation pending)	The invitation link has not been used yet; the account cannot sign in.

The Dışa Aktar (Export) and İçe Aktar (Import) buttons appear only with the users.import permission; İçe Aktar additionally requires users.create, users.edit, users.delete, roles.create and roles.edit. The file is not shared because it contains password hashes.

Actions menu

User row Actions menu

1. 1Name, phone, roles and org unit
2. 2Personal permissions on top of roles
3. 3Narrows rights to warehouses and work centers
4. 4Reset link or manual password
5. 5Disables the account — record is kept

Item	When it appears	Permission	Page
Kullanıcıyı Düzenle (Edit User)	On an active account	users.edit	Assign a role to a user
Ekstra Yetkiler (Extra Permissions)	On an active account	users.edit	Grant extra permissions
Organizasyon Kısıtlaması (Organizational Restriction)	On an active account	users.edit	Assign an organizational restriction
Şifre (Password)	On an active account	users.edit	Reset a password
Daveti Yeniden Gönder (Resend Invitation)	On an account with a pending invitation	users.create	Invite a user
Kilidi Kaldır (Unlock)	Only on a locked account	users.edit	Unlock an account
Devre Dışı Bırak (Disable)	On an active account	users.delete	Disable a user
Geri Yükle (Restore)	On a disabled account	users.delete	same page

A disabled account has no editing items; a user without the users.delete permission sees "Devre dışı hesapta işlem yok" (No actions on a disabled account) there.

New User window

New User — User Information

1. 1Tabs — information, roles, org unit
2. 2E-mail — login ID, cannot be changed later
3. 3Invitation — single-use link valid for 3 days (recommended)
4. 4Administrator sets the password — account opens at once
5. 5Lock on failed attempts
6. 6Send Invitation — needs e-mail settings

The window's description: "Hesap davetle ya da sizin belirlediğiniz şifreyle açılır. Etkili izinler seçilen rollerin ve birimin rollerinin birleşimidir." (The account is created with an invitation or with a password you set. The effective permissions are the union of the selected roles and the unit's roles.)

Tab	Field	Rule
Kullanıcı Bilgileri (User Information) › Kimlik (Identity)	Ad (First Name), Soyad (Last Name)	Required.
	E-posta (Email)	Required. "Giriş kimliği olur; sonradan değiştirilemez." (Becomes the sign-in ID; cannot be changed later.)
	Telefon (Phone)	Optional; digits, spaces, +, ( ) and -; 7–15 digits.
Kullanıcı Bilgileri › Giriş ve Şifre (Sign-in and Password)	Davet e-postası gönder — kullanıcı şifresini kendisi belirlesin (Send an invitation email — let the user set their own password)	Default. A single-use link valid for 3 days; the account cannot sign in until the link is used. Requires email settings.
	Şifreyi ben belirleyeyim (I will set the password)	The account is created immediately. Şifre (Password), Şifre (tekrar) (Password (again)), Rastgele Üret (Generate Random), Kopyala (Copy), İlk girişte şifre değiştirilmesi zorunlu olsun (Require password change at first sign-in), Hesabın açıldığını kullanıcıya e-postayla bildir (Notify the user by email that the account has been created). The password is not included in any email.
Kullanıcı Bilgileri › Güvenlik (Security)	Hatalı şifre denemelerinde hesabı kilitle (Lock the account on failed password attempts)	On by default. If off, attempts are unlimited.
Roller (Roles)	Role list (grouped by area, searchable)	Multiple roles can be selected. For conflicting roles, a Görevler ayrılığı uyarısı (Segregation of duties warning).
Organizasyon Birimi (Organizational Unit)	Unit tree	Visible only with organization.view; assigning requires organization.edit.

New User — administrator sets the password

1. 1Password — 8+ characters, a digit, a lowercase letter
2. 2Generate and Copy
3. 3Change password at first login
4. 4Notice e-mail — password is not included
5. 5Create

Depending on the selected method, the confirm button is Davet Gönder (Send Invitation) or Oluştur (Create).

Edit User window

Edit User

1. 1Roles — add or remove roles
2. 2Account and login lock status
3. 3Save — disabled when nothing changed

The same three tabs. The email is read-only ("Giriş kimliğidir, buradan değiştirilemez. Ad boşsa listede e-posta gösterilir." — It is the sign-in ID and cannot be changed here. If the name is empty, the email is shown in the list.). The Durum (Status) group shows Hesap (Account; Etkin (Active) / Devre dışı (Disabled)) and Giriş kilidi (Sign-in lock; if locked, the end time and the number of failed attempts). Kaydet (Save) is disabled if there are no changes.

Extra Permissions window

Extra Permissions — personal grants

1. 1All screens in menu — grants nothing
2. 2Search permissions
3. 3Locked — from a role, cannot be removed here
4. 4Grant a permission the role lacks
5. 5Reduce extra grants to read-only

"Rolün üstüne kişiye özel izin verin. Kilitli izinler kullanıcının rollerinden gelir; kaldırmak için rolü düzenleyin." (Grant person-specific permissions on top of the role. Locked permissions come from the user's roles; to remove them, edit the role.) The permission tree is the same as in the role window (Modül › Sayfa › İşlem — Module › Page › Action). Locked rows come from roles. Bütün ekranları göster (Show all screens) opens all permitted screens in the person's menu ("rolünün ekran kataloğundan bağımsız; yetki vermez" — independent of the role's screen catalog; does not grant permissions). Ek İzinleri Salt Okunur Yap (Make Additional Permissions Read-Only) reduces only the directly granted additional permissions to view permissions.

Organizational Restriction window

Organization Restriction — warehouses and work centers

1. 1Warehouses and Work Centers tabs
2. 2No selection = no restriction; selection narrows rights
3. 3Tick the allowed warehouses
4. 4Clears the selection of this type

"Kısıtlama yetki vermez, daraltır: rolün izin verdiği işi seçilen depo ve iş merkezlerine sınırlar. Seçim yoksa o türde kısıt yok." (A restriction does not grant permissions, it narrows them: it limits the work the role permits to the selected warehouses and work centers. If nothing is selected, there is no restriction for that type.) Two tabs: Depolar (Warehouses) and İş Merkezleri (Work Centers); the tab name shows the number selected. Bu Türdeki Kısıtı Kaldır (Remove the Restriction for This Type) clears the selection on the open tab. An inactive warehouse or work center remains in the list with a "pasif" (inactive) note.

Password window

Password — link or manual

1. 1Reset link valid for 30 minutes
2. 2Manual password — you hand it over
3. 3Must change at first login
4. 4Save — sets the manual password

Two methods in the same window: Sıfırlama bağlantısı gönder (Send reset link; valid for 30 minutes, the user sets the password) and Yeni Şifre (elle belirle) (New Password (set manually); at least 8 characters; İlk girişte şifre değiştirilmesi zorunlu olsun (Require password change at first sign-in) checked by default).

Confirmation windows

Disable the account?

1. 1Login closes, open session ends; roles are kept

Window	Text
Hesap devre dışı bırakılsın mı? (Disable the account?)	"… giriş yapamaz olacak ve açık oturumu kapanacak. Kayıt SİLİNMİYOR: rolleri olduğu gibi duruyor, geçmiş belgeler hesabı göstermeye devam ediyor ve dilediğiniz zaman geri yükleyebilirsiniz." (… will not be able to sign in and their open session will be closed. The record is NOT DELETED: its roles remain as they are, past documents continue to show the account and you can restore it at any time.)
Hesap geri yüklensin mi? (Restore the account?)	"… yeniden giriş yapabilecek. Kapatıldığı günkü rolleri ve yetkileri olduğu gibi geri gelir — yeniden atamanız gerekmez. Parolası değişmedi." (… will be able to sign in again. The roles and permissions it had on the day it was closed come back as they were — you do not need to reassign them. Its password has not changed.)
Kilit kaldırılsın mı? (Remove the lock?)	"… art arda başarısız giriş denemesi nedeniyle kilitlendi ve süresi dolunca kilit kendiliğinden çözülecek. Kaldırırsanız hesap HEMEN giriş yapabilir. Şifre DEĞİŞMEZ: …" (… was locked because of repeated failed sign-in attempts, and the lock will clear by itself when it expires. If you remove it, the account can sign in IMMEDIATELY. The password does NOT CHANGE: …)
Davet yeniden gönderilsin mi? (Resend the invitation?)	"… adresine 3 gün geçerli, tek kullanımlık yeni bir bağlantı gider. Daha önce gönderilen bağlantı artık çalışmaz." (A new single-use link valid for 3 days is sent to …. The previously sent link no longer works.)

Disabled accounts and Restore

1. 1Status: Inactive (disabled)
2. 2Disabled badge
3. 3Restore — reopens with its roles

Server rejection messages

Situation	Message
No email settings, invitation selected	"E-posta gönderimi yapılandırılmamış (Yönetim › Özelleştirme › Genel › E-posta Ayarları). Davet bağlantısı gönderilemez; hesabı şifre belirleyerek açabilirsiniz." (Email sending is not configured (Administration › Customization › General › Email Settings). The invitation link cannot be sent; you can create the account by setting a password.)
Disabling your own account	"Kendi hesabınızı devre dışı bırakamazsınız. Bunu başka bir yönetici yapmalı." (You cannot disable your own account. Another administrator must do this.)
Removing the role from the last Administrator	"… Yönetici rolünü taşıyan son etkin hesap. Rolü kaldırmadan önce başka bir kullanıcıya Yönetici rolü verin." (… is the last active account holding the Administrator role. Give another user the Administrator role before removing the role.)
Resending an accepted invitation	"Bu hesabın daveti kabul edilmiş; şifre için sıfırlama bağlantısı gönderin." (This account's invitation has been accepted; send a reset link for the password.)
Unlocking an account that is not locked	"Bu hesap kilitli değil." (This account is not locked.)
License user limit	"Lisans en çok … etkin kullanıcıya izin veriyor; şu an … etkin kullanıcı var. Kullanılmayan bir hesabı kapatın ya da lisansı genişletin." (The license allows at most … active users; there are currently … active users. Close an unused account or extend the license.)
Window validation	"Ad zorunlu." (First name is required.) · "Soyad zorunlu." (Last name is required.) · "E-posta zorunlu." (Email is required.) · "Geçerli bir e-posta adresi yazın." (Enter a valid email address.) · "Şifreler aynı değil." (The passwords do not match.) · "Kullanıcı bilgilerinde düzeltilmesi gereken alanlar var." (There are fields in the user information that need to be corrected.)