The “manager” user has sufficient permissions to configure SchoolTool, enter student data, and completely set up and maintain the system.
Rights and permissions in SchoolTool related to administering the school as a whole are controlled through membership in several Groups: Site Managers, Clerks and School Administrators. These groups, as well as Teachers and Students, cannot be deleted and always exist within each school year.
By default the “manager” user is both a member of Site Managers and Clerks.
A single person can be a member of several of these groups, and permissions are additive (adding a member of Site Managers to School Administrators does not limit his or her rights to edit data). There is considerable overlap in permissions between the groups, in particular Site Managers and Clerks.
Both Site Managers and Clerks should be trusted users, because either can elevate their own permissions by adding themselves to the other administrative groups. Note that a malicious clerk would always be able to wreak havoc on a student information system by intentionally entering bad data, deleting things, etc.
The original “manager” user has some special rights which are independent of his or her group membership, so that SchoolTool administrators cannot completely lock themselves out of the system accidentally.
If you forget the password for “manager”, you can reset the “manager” password from the server’s terminal.
Where PASS is the desired password:
$ sudo service schooltool stop
$ sudo python -m schooltool.app.main -c /etc/schooltool/standard/schooltool.conf --restore-manager PASS
$ sudo service schooltool start
And log in with the new password.