Setting Up Object Access Permissions

To set up object access permissions, use the Navigator section on the navigation panel.

NOTE. When roles of information security administrator and application administrator are separated, the Navigator section is available only for information security administrator.

Security model objects of Foresight Analytics Platform include all application system objects: folders, tables, queries, views, dimensions, standard and virtual cubes, forms, reports, workspaces, and so on. Access to objects is regulated with access control rules.

NOTE. The Navigator section of the security manager web application enables the user to work with the following object types: dashboard, regular report, express report (OLAP), workbook, modeling container, modeling problem, time series, cubes, MDM repositories, table MDM dictionaries, mobile application container, ADOMD catalogs.

To ensure data safety and integrity, set access permissions and/or security levels for each repository object, and also for container object elements, for example, in MDM repository.

The navigator consists of a tree of objects displaying a hierarchy of objects and folders at the left part and a list of objects displaying objects located in the selected folder at the right part

To change display type of objects:

In the desktop application:

Toggle the display type in the View main menu.
Select the display type on the toolbar using the buttons:

- large icons.
- small icons.
- list.
- table.

In the web application:

Click the View button on the toolbar and select a display type:

- small icons.
- large icons.

- table.

After executing the operations, the object display type will be changed.

To navigate between objects:

Click the Backward button on the toolbar or use the hotkeys ALT+LEFT to move to the previous object.
Click the Forward button on the toolbar or use the hotkeys ALT+RIGHT to move to the next object.
Click the Move One Level Up button on the toolbar to move one level up the section folder hierarchy.

NOTE. Navigating between the objects is available only in the desktop application.

To search for objects:

In the desktop application:

Select the Edit > Search main menu item.
Select the Search context menu item in object tree object.
Click the Search button on toolbar.
Use the hotkeys CTRL+F.

In the web application:

Click the Search button on the toolbar.
Use the hotkeys CTRL+F.

After executing one of the operations, the object search dialog box opens.

To view properties of the selected object:

Select the Object > Properties main menu item.
Select the Properties item in the object's context menu.
Click the button on the toolbar.

The Object Properties dialog box opens.

NOTE. Viewing object properties is available only in the desktop application.

To set up access permission of the selected object, open the Access Control Settings dialog box in the desktop application and the Properties side panel in the web application:

In the desktop application:

Select the Access Permissions item in the object's context menu.
Select the Object > Access Permissions main menu item
Press the ENTER key.
Double-click the object name with the main mouse button.

In the web application:

Select the object.

After executing the operations, set up required parameters of access control in the Access Control Settings dialog box in the desktop application and the Properties side panel in the web application:

Access permissions for MDM dictionary elements can be set up only in the desktop application if the Elements Have Access Permissions checkbox is set in the MDM dictionary.

To get detailed information, go to the Access Permissions for MDM Dictionary Elements section.

To export object access permissions to file:

Select the Service > Export Access Permissions main menu item.
Select export option in the drop-down list:

By Object Type. Access permissions in the file are granted based on object type.
By Folders, By Object Type. Access permission in the file is granted in the repository according to the existing hierarchy.

A standard dialog box for file saving opens where you need to specify name and path.

For details on export see the Exporting Security Policy and Access Permissions section.

NOTE. Export of access permissions for objects is available only in the desktop application.

To enable displaying of access permissions as icons:

Select the View > View Access Permissions main menu item.
Select the display option in the drop-down list:

Do Not Display Access Permissions. Disable viewing of access permissions.
Display Discretionary Permissions. Access permissions to objects for the separate object are displayed.
Display Mandatory Permissions/Security Levels. Access labels of the object are displayed.

After enabling one of the options object access permissions will be shown as icons in the navigator.

TIP. To display subjects with explicitly granted permissions, enable the appropriate parameter of the filter in the button drop-down menu on the toolbar.

NOTE. Access permissions can be displayed as icons only in the desktop application.

To get detailed information, see the Viewing Access Permissions section.

NOTE. If section parameters have been changed, an attempt to go to another section of the security manager or to close it displays a request to apply changed settings.