IMetabasePolicy

Description

The IMetabasePolicy interface contains properties and methods used to set repository security policy.

Properties

	Property name	Brief description
	ABACRules	The ABACRules property returns structure of attribute-based access control.
	AdmUserTitle	The AdmUserTitle property determines a string to display in the window header of a security manager for a specified administrator type.
	AllowCreateUserGrant	The AllowCreateUserGrant property enables creating two roles while maintaining the security policy:
	AllowDeferredLoading	The AllowDeferredLoading property determines the attribute of the deferred loading of descriptors on connecting to the repository.
	AllowedDocumentFormats	The AllowedDocumentFormats property determines formats documents, that can be loaded and opened in repository.
	AllowUserQueries	The AllowUserQueries property determines whether the development tools for data exporting from the platform warehouse will be available.
	AlwaysPrintDocumentLabel	The AlwaysPrintDocumentLabel property determines whether marking stamp will be displayed regardless the applied method of access control and settings of document marking on exporting or printing.
	AttributeBasedAccessControl	The AttributeBasedAccessControl property determines whether attribute-based access control method is used to control access to objects.
	AuditClipboardOperations	The AuditClipboardOperations property determines logging of operations of copying to clipboard.
	AuditPolicy	The AuditPolicy property returns an object that contains access policy to objects and events accounting under them.
	AutoLockPeriod	The AutoLockPeriod property determines user inactivity period in days, when it expires the user account is blocked.
	AuthenticationPolicy	Outdated. Use IMetabasePolicy.CheckUserPassword.
	AutoRun	The AutoRun property returns an object opened while connecting to repository.
	Certificates	The Certificates property returns collection of security certificates.
	CheckUserPassword	The CheckUserPassword property determines whether authorization by platform means is used.
	CopyToClipboardAllowed	The CopyToClipboardAllowed property determines whether it is possible to copy data into a clipboard and copy a screen.
	CreateDeferredSubjects	The CreateDeferredSubjects property determined whether users with deferred loading are created.
	DiscretionaryAccessControl	The DiscretionaryAccessControl property determines whether it is possible to use discretionary access control.
	EnforceApplicationRole	The EnforceApplicationRole property indicates whether it is possible to use application role in security policy.
	ESKMode	The ESKMode property determines whether it is possible to use compatibility mode to work with domain groups in Oracle DBMS.
	FailedLogonsCounter_ResetPeriod	The FailedLogonsCounter_ResetPeriod property determines the period (in minutes) after which the counter of failed logons number reset.
	ForceCleanMemory	The ForceCleanMemory property determines whether to clean the memory and fill it with zeros.
	IsaPresent	The IsaPresent property returns whether the mode of distributing roles between information security administrator and application administrator is activated.
	LockIdentifiersPeriod	The LockIdentifiersPeriod property determines period during which it is forbidden to reuse certificates of deleted users.
	LogonHoursPolicy	The LogonHoursPolicy property returns parameters of access to the platform for the specified security subject.
	MandatoryAccess	The MandatoryAccess property returns an object that contains mandatory access of a security manager.
	MandatoryAccessControl	The MandatoryAccessControl property determines a flag of using mandatory method of access distribution.
	MaxFailedLogons	The MaxFailedLogons property determines the number of failed logons, when it is exceeded, the user is blocked.
	MethodsCombineAlgorithm	The MethodsCombineAlgorithm property determines permission combination algorithm by attribute-based and discretionary access control method.
	ObjectsAttributes	The ObjectsAttributes property returns attributes of classes and specific types of objects.
	ObjectsIdFormat	The ObjectsIdFormat property determines identifiers format for repository objects.
	PasswordPolicy	The PasswordPolicy property returns an object that contains password policy.
	PredefinedPrivilege	The PredefinedPrivilege property returns parameters of a specified privilege. Defining privileges is performed with enumeration.
	PrintersPolicy	The PrintersPolicy property returns the security settings for printers.
	Privilege	The Privilege property returns privilege parameters by the specified name.
	PrivilegeCount	The PrivilegeCount property returns number of privileges available in a security manager.
	PrivilegeName	The PrivilegeName property returns element privilege by index.
	ReportStamp	The ReportStamp property determines the stamp type used to mark documents.
	RestrictAdminAccess	The RestrictAdminAccess property determines whether the users having the privilege as the application administrator (creating, deleting users), are able to open the repository objects.
	RestrictGroupDeletion	The RestrictGroupDeletion property determines whether the deletion of groups is allowed if the group has effective permissions for the repository objects.
	RestrictIsaAccess	The RestrictIsaAccess property determines whether users who have a privilege as ISA (Change security mode and a list of access control of any object) have a possibility to open repository objects.
	RestrictUserDeletion	The RestrictUserDeletion property determines whether application administrator is prohibited to delete users who has any access permissions on repository objects.
	RootObject	The RootObject property determines the folder which will be the root on logging in the repository.
	Security	The Security property returns parameters of a security manager.
	StationsPolicy	The StationsPolicy property returns a list of stations that enter current repository was prohibited.
	SupportUserPrivateFolder	The SupportUserPrivateFolder property determines whether the mechanism of users' private folders is used.
	UserPrivateFolderRoot	The UserPrivateFolderRoot property determines the root folder for users' private folders.

Methods

	Method name	Brief description
	IsObjectsIdFormatValid	The IsObjectsIdFormatValid method checks the string on detecting incorrect data (the Russian language, the first character is number, and so on). If the string is correct, it can be used as identifiers format.
	PromoteToIsaMode	The PromoteToIsaMode method activates a mode of distributing roles between information security administrator and application administrator.
	RevertToStandardMode	The RevertToStandardMode method disables the mode of distributing roles between information security administrator and application administrator.

See also:

Metabase Assembly Interfaces | General Policy