Define Access to Securable Objects - Precisely_EnterWorks - EnterWorks - 11.0

User group permissions control both what data objects group members can access and what they can do with those objects. Objects such as code sets, users, groups, and repositories have access permissions that can be set at the group level. These permissions give group members the ability to create an object and to read, edit or delete an existing object.

Repositories have additional permissions that allow a user to add, edit, sync-in (import), and delete records. Be careful to assign correct permissions to a repository and its underlying objects. Anyone given access to the repository must have read privilege on the underlying profile and the code sets used by the repository. If you are allowing a user to import data into a repository, they must have permission to create File Definition and Data Source objects.

Repository security assignments must include an attribute security filter and might include a record security filter. The filter attribute controls which attributes in a repository the user is allowed to read and edit. If no specific filter is defined for profile, the default filter must be specified. If no filter is defined, the user will not see any data. The Record security filter applies search condition on records returned from a repository to limit access to only those records that match the Record filter criteria.

While it is possible to set permissions for individual users to access an object, it is strongly suggested that you assign permissions to groups instead.

For a detailed description of how assigning permissions affects access to particular securable objects, see Securable Object Permissions in Detail.

There are two ways to define security for a securable object. The result is the same in either case. Use the method most convenient for you.

• Define a group's access to one or more securable objects: You can set a group's permissions for one or more objects at once.
• Define access to a securable object for one or more groups: You can edit a securable object's permissions and define the access each user group has to the object.

Define a group's access to one or more securable objects

1. Log into the Classic UI as an administrator.
2. In the Feature bar, open Users and Groups, then select Groups.
3. Select the group for which you want to manage object security, open the Action dropdown menu, then select Security.
4. The Security page will appear. It lists the system's users, groups, and data model objects. You can click Show All and Hide All in the upper right of the page to expand and collapse all the objects. Edit the permissions.
   • Create: If checked, the group's users can create that object.
   • Read: If checked, the group's users can read the object.
   • Edit: If checked, the group's users can edit the object.
   • Delete: If checked, the group's users can delete the object.

   Additional permissions are available for repositories:

   • Sync-in: Users can import data into a repository.
   • Add Records: Users can add new records to a repository.
   • Delete Records: Users can delete records from a repository.
   • Edit MetaData: Users can change repository properties.
   • Edit Record Attribute Filter: (Required) You must select a filter. The default filter allows access to all attributes. For more information, see Create or Edit an Attribute Security Filter.
   • Record Filter: If no filter is specified, users will have access to all rows of data in the repository. For more information, see Create or Edit a Record Security Filter.
5. Click Save. Your changes will be saved and a completion message will appear.

Define access to a securable object for one or more groups

To assign the securable object to one or more groups at a time:

1. Open the list that contains the object. For example, to open the Profiles list, open the Feature bar, open Model, and select Profiles.
2. Select the securable object you want to define access to.
3. Open the Action dropdown menu and select Security.
4. The Security window will appear. It lists the system's users and user groups. You can click Show All and Hide All in the upper right of the page to expand and collapse all the objects. Expand the Groups section.
5. Edit the permissions.
   • Read: If checked, the group's users can read the object.
   • Edit: If checked, the group's users can edit the object.
   • Delete: If checked, the group's users can delete the object.
6. Click Save at the bottom of the list.

Securable Object Permissions in Detail