<?xml version="1.0" encoding="UTF-8" ?>

<!--====================================================
   This is a sample of an allowedUsers.xml file.
   allowedUsers.xml files are used to specify "allowed participants" by name: to list names (of participants) 
   who are allowed to join this session.

   To use this, change the ALLOWED_USERS parameter in a session descriptor file, to be  =FILE

       See sampleDescriptor.xml for detals on setting the ALLOWED_USERS, and other, descrioptor variables.

   Each participant is specified in a "record", that is delimited by <user> and </user>. Thus,
   a stypical allowedUsers.xml file will contain the XML header, a bounding element (say <allowedUsers>)
   and one or more <user> records.

   The syntax of a <user> record is simple:

              <user  ><name>name</name> <password>apwd</password>   <refid>referenceID</refid> 
                        <comment> optional comment</comment>
               </user>

    where:

       <name> is the only required field. The one-word, case-insensitive name. 
              This name will be compared to a name entered by the participant
       <password> is optional. If specified, the participant must match this case-insensitive, 1-word password.
               Note: the password is used only if  USE_PASSWORD session specific variable is not set to 0 
       <refid>   is optional. If set, this is  the reference ID assigned to the participant. The reference ID is used
                to assign parameter values to this participant (see generateParameters.htm for the details)
      <comment> is optional. It can be used to put a comment about this user.

   Example:

      <user> <name>moe</name> </user>
      <user> <name>Sam</name> <password>tunafish</password> <comment>The younger child</comment> </user>
      <user> <name>Alan </name>   <password>munchkin</password>   <refid>5</refid> </user>

   Notes:
     *  If you want to use participant-specific passwords, you MUST specify (in the session specific parameter file)
                USE_PASSWORD='something'
         It doesn't matter what the "something" is (i.e.; use_password='x' will work). 
         If you do NOT specify this, then the password input box will  not be shown on the join-a-session form!

    *   A password of "0" means this participant does NOT need a password. 
    *   A password of "1", of if <password> is NOT specified, then the default password is used for this participant.

    *   Note that if ALLOWED_USERS is '', or 0, then any username can join (though they will need to enter a password, 
        if USE_PASSWORD is specified)
        However, if ALLOWED_USERS="=FILE"  is specified, and the session's allowedUsers.xml file has no entries, 
        than NO one will be allowed to join!

    *   To reiterate, when  USE_PASSWORD is specified, then the value of USE_PASSWORD is used only if 
        NO participant-specific password is specified  (or if a <password>1</password> is specified). 
        If a participant-specific password is specified (for a given participant), 
        the value of USE_PASSWORD is ignored.

    * If a REFID is specified, then its value is used as the reference ID.  
       This means that:
          * client-side extraction of reference variables is used,
          * and  HOW_ASSIGN and REF_MAX are NOT used to generate a reference ID.
        However,  REF_MAX should still be greater than 0 (otherwise, control panel assignation is used)

        Note that using REFID and  control-panel assignation is not recommended. 
        It will work, but not necessarily in a predictable fashion.

    * For more details on session-descriptor variables, see sampleDescriptor.xml

-->

<allowedUsers>
<!-- <user>... </user> records in here -->
 
</allowedUsers>
