Manufacturing Kiosk Access

Introduction

This guide explains how to configure a ThinkIQ site so that a class of shop-floor users—for example, QA operators at a manufacturing kiosk—can log in and use only the data-entry forms intended for them (ThinkIQ display scripts), without seeing or navigating the rest of the portal.

The configuration is done entirely in the site's CMS administration console (Joomla). No platform code changes are required, and the setup survives ThinkIQ platform updates.

Audience: Site administrators

Requirements

How It Works

CMS viewing access is additive: a user sees everything granted to any group they belong to, and there is no way to subtract visibility from a group. The ThinkIQ platform creates its standard menus, menu items, and menu modules at the Registered access level.

The key to this configuration is therefore to place operators in a user group that is not part of Registered—a sibling group directly under Public. Operators then automatically see none of the standard portal content, and a dedicated access level makes the operator forms visible to them alone.

Because platform updates recreate the standard menus at the Registered level, the isolation is preserved automatically (R6).

Prerequisites

• Administrator access to System settings in the CMS administration console.
• The configuration steps are presently available to ThinkIQ DevAdmins or ThinkIQ integration partners who have qualified access to the CMS administrator console.
• The required data-entry display scripts already exist, and you know each form URL.

To obtain a form URL, open the form in the platform and copy the address from the browser, keeping only the path and query string. Drop the scheme and host name.

/index.php?option=com_thinkiq&task=previewScript&script_name=<file>.php
&script_id=<id>&parent_id=<id>&node_id=<id>

Important: The URL must begin with /index.php. The leading slash is required. Links entered without it are rewritten by the CMS and will not open correctly from a top-level menu position.

The site should run a ThinkIQ template release that includes the July 2026 navigation fix for top-level URL menu items. Older templates can still support this configuration using the workaround described in Troubleshooting item T1.

Configuration Steps

Step 1 — Create the Operator User Group

1. Navigate to Users → Groups → New.
2. Set Title to Kiosk Operators.
3. Set Group Parent to Public (not Registered).

Important: If the group is created under Registered, it will inherit visibility of the entire portal.

Step 2 — Allow the Group to Log In

1. Go to System → Global Configuration → Permissions.
2. Select the Kiosk Operators group.
3. Set Site Login to Allowed.
4. Save the configuration.

Because this group is a sibling of Registered instead of a child, login permission must be granted explicitly.

Step 3 — Create the Operator Access Level

1. Navigate to Users → Access Levels → New.
2. Set Title to Kiosk Operators.
3. Select only the Kiosk Operators group.

If a specific form should also be visible to standard users, the access level can contain multiple groups. Menu items, however, can only be assigned to a single access level.

Step 4 — Create the Operator Menu

1. Navigate to Menus → Manage → Add New Menu.
2. Set Title to Operator Menu.
3. Set Unique Name to operator-menu.

This menu is required for both presentation modes.

Step 5 — Add the Form Menu Items

1. Navigate to Menus → Operator Menu → Add New Menu Item.
2. Select System Links → URL as the Menu Item Type.
3. Enter the copied ThinkIQ form URL.
4. Set Access to Kiosk Operators.
5. Select the desired Target Window option.

• Parent: Opens in the current browser tab (recommended).
• New Window: Opens in a separate browser tab/window.

Repeat for each operator-facing form.

Step 6 — Create a Landing Page for All Authenticated Users

After login, users are directed to the site Home page. If Home is restricted to Registered users, kiosk operators will receive an access error.

1. Create an access level named All Logged In.
2. Include both Registered and Kiosk Operators groups.
3. Assign this level to the Home menu item.
4. Assign this level to the content displayed on the Home page.

This provides all authenticated users with a valid landing page while keeping operator access isolated.

Step 7 — Small Menu Mode: Publish a Menu Module

A Joomla menu is displayed only when referenced by a menu module.

1. Navigate to Content → Site Modules.
2. Duplicate an existing navigation menu module.
3. Edit the duplicate and set:
   • Title: Operator Menu
   • Status: Published
   • Select Menu: Operator Menu
   • Access: Kiosk Operators
   • Menu Assignment: On all pages

Operators will see only this menu. Standard users will not.

For True Kiosk mode, leave the module unpublished.

Step 8 — Create Operator Accounts

1. Navigate to Users → Manage → New.
2. Assign only the Kiosk Operators group.
3. Ensure Registered is not selected.

Prefer individual user accounts (or one account per station) so activity can be attributed correctly.

Presentation Modes and Switching

Switching between modes requires only publishing or unpublishing the Operator Menu module.

Verification Checklist

Security Notes and Limitations

• Authentication is enforced by the platform, not by the menu structure.
• Menu visibility controls navigation only, not access by direct URL.
• Where strict access control is required, implement authorization checks directly inside the display script.
• Operators only possess Public and Kiosk Operators access levels.
• Any platform data restricted to Registered or other levels must be explicitly granted if needed.
• Password policies, MFA, account locking, and related controls remain unchanged.
• Changes to user groups and access levels are applied after the next login session.

Troubleshooting

Appendix A — Objects Created (Quick Reference)