By default, a document in the Directory inherits the permission level of the folder in which it is stored. If you want to control document access at a more granular level, you can set permissions on a selected Directory object, including data flows, schedules and library nodes.
- From the document list in the center of the Directory screen, select the document for which you want to set permissions.
- From the menu in the Details panel on the right of the screen, select Edit Permissions.
- The Edit Permissions dialog opens. You can change the permission level of a document as follows:Setting a basic permission level
Clear the Inherit permissions from parent container check box, then select the required level of access from the Permissions menu to the right of the user or group.
If the user or group to which you want to assign permissions is not already listed, you can search for additional users or groups in the Add a user or group list.
Choose from the following basic permission levels:
- No Access - The user or group cannot open, view or edit the document.
- Read Only - The user or group can open and view the document in read only mode.
- Read and Execute - The user or group can view and run the document.
- Write and Execute - The user or group can edit and run the document.
- Full Access - The user or group can open and edit the document, and edit the permission level of the document.
Advanced permission control
Note: In most cases, you can use the basic permission settings to achieve the desired results. Before using the advanced permission settings, carefully consider whether it is necessary.To further customize the permission level of a document, click the Advanced tab, then select any combination of the following permissions:
- Read - The user or group can see the metadata of the document and open the document in read only mode.
- Read Contents - Currently provides the same level of access as Read. It is recommended that you set this level of access on documents for future product enhancements.
- Write - The user or group can edit the document and its metadata.
- Write Contents - The user or group can add nodes to a data flow or library node.
- Execute - The user or group can run the data flow or schedule.
- Edit Permissions - The user or group can edit the permission level of the document.
- Click Apply Changes to assign the selected permission levels.
Set permissions on Data360 Nodes
You can assign specific permissions to nodes in the Data360 Nodes folder to restrict access to certain users or groups of users.
- Click the All Folders tab in the Directory and select Data360 Nodes.
- Select the node for which you want to view permissions.
- Select Edit Permissions from the menu in the details panel.
- The Edit Permissions dialog opens and you can change the default permission level.
- Click Apply Changes to assign the selected permission levels.
Redacted node properties
You can only view the property values of a node for which you have read permission.
Depending on the permissions that have been set, you may have execute permission on a node for which you do not have read permission. Any properties that have been defined on a node for which you do not have read permission will be shown without the value and with a "Redacted" label.
For example, an Admin user creates a new library node which inherits its properties from a Java node. The Admin user edits the JavaClass property on the "New Java node". All other property values remain unedited, and continue to be inherited from the default Java node.
The Admin user saves the new library node and restricts access to the node for end users to give only execute permission:
An end user, who has been assigned the role of "User", opens a data flow that contains the "New Java node". The user cannot view the JavaClass property value as this property was set on the "New Java node" and they do not have read access on this node. In this case, the JavaClass property is shown with the Redacted label:
All other property values are visible as these are inherited from the default Java node to which the user has full access.
You can override redacted property values by clicking the Override value link to enter a local value.
After editing the property value, if you want to revert to the original value that was set on the library node, you can choose Restore Default Value from the property menu. Selecting this option will restore the Redacted label.