Additional Security Parameters

To determine detailed permissions:

In the desktop application:

Click the Advanced button on the Discretionary Access Control tab.

The Additional Security Parameters dialog box opens.

In the web application:

Click the security subject in the Groups and Users box.
Click the Show Full List of Operations button to display additional operations.
Set permissions for operations that must be allowed or denied in the Permissions for Selected list.

The Additional Security Parameters dialog box in the desktop application:

Add, delete or edit object access permissions.

The following parameters are displayed for the list element:

Type. It indicates, which operation is used: Allow or Deny.
Name. Name of the security subject, which is assigned permissions to access objects.
Rights. A list of permissions set for this security subject.
SID. Unique identifier of the security subject.

To add a permission, click the Add button, which opens the Select Users and Groups dialog box.

After a security subject is selected, the Permission Element dialog box opens:

This dialog box displays the name of the selected subject of the security model and a list of detailed permissions for certain object types. To allow or deny executing specific actions on an object, select corresponding checkboxes next to the required operations.

IMPORTANT. Prohibition operation has a higher priority.

Access permissions can be changed for the selected subject in the Permission Element dialog box; to open it, click the Edit button or double-click the subject.