Access Protocol

To set up access protocol, use the Access Protocol section on the navigation panel.

NOTE. When roles of information security administrator and application administrator are separated, the Access Protocol section is available only for information security administrator.

Object. Name of the object the user is addressing to.
Identifier. Identifier of the object the user is addressing to.
Access Level. Displays the name of the object’s security level. This box is displayed if the mandatory access control method is used.

NOTE. The box is available only in the desktop application.

Workstation. The workstation, from which the object is accessed.
OS User. The operating system user accessing the object.
Platform user. User of Foresight Analytics Platform accessing to object.
IP Address. The IP address of the workstation that is used to get access to the object.

Time. The date and time of the operation.
Operation. The type of logged operation.
Result. Displays permissions for the requested action: successful - the user has required permissions; unsuccessful - the user has no permissions for this action. Records with failed actions are shown in contrasting color.

NOTE. If a child was called unsuccessfully, the result of calling all parent objects is also regarded as failed.

NOTE. This box displays additional information about the logged records:
- Adding, deleting, changing groups (adding users to a group).
- Adding, deleting, changing users (changing name, password, and so on).
- Granting or revoking (canceling) privileges.
- Changing mandatory policy: adding, deleting or changing access categories, adding, deleting or changing access category levels.
- Changing policies in the policies editor: enabling or disabling ISA, enabling or disabling discretionary or mandatory access control; changing password policy, autostart object.
- Changing access permission with specifying of information about previous and granted permissions (before/now). A comment also contains information on changes in the Inherit Permissions from Parent Object checkbox status.
- Changing object auditing.
- File path:
- - When the security policy is saved to or restored from a file.
  - When the access protocol is saved to a file.
  - On working with an update.

- File name:
- - On exporting a regular report or express report to file.
- The user logout is forced if the user is disconnected from the schema by an administrator.
- Adding, deleting and clearing the list of available printers.
- Information on executing or prohibiting printing on the device and changing the printer access level.
- Adding a printer for the subject.
Connection. The box is filled only on update installation and contains the records on database connections opened during the update.

NOTE. The box is available only in the desktop application.