Setting Up Object Access Permissions

To set up object access permissions, use the Navigator section on the navigation panel.

NOTE. When roles of information security administrator and application administrator are separated, the Navigator section is available only for information security administrator.

Security model objects of Foresight Analytics Platform include all application system objects: folders, tables, queries, views, dimensions, standard and virtual cubes, forms, reports, workspaces, and so on. Access to objects is regulated with access control methods. When attribute-based access control method is used, access permissions for objects are set up by adding policies and rules in the Attribute-Based Access Control section.

NOTE. The Navigator section of the security manager web application enables the user to work with the following object types: dashboard, regular report, express report (OLAP), workbook, modeling container, modeling problem, time series, cubes, MDM dictionaries, ADOMD catalogs.

To ensure data safety and integrity, set access permissions and/or security levels for each repository object, and also for container object elements.

The navigator consists of a tree of objects displaying a hierarchy of objects and folders at the left part and a list of objects displaying objects located in the selected folder at the right part

To change display type of objects:

In the web application click the View button on the toolbar and select a display type:

- small icons.
- large icons.

- table.

In the desktop application:

Toggle the display type in the View main menu.
Select the display type on the toolbar using the buttons:

- large icons.
- small icons.
- list.
- table.

After executing the operations, the object display type will be changed.

To navigate between objects:

Click the Back button on the toolbar or press ALT+LEFT to move to the previous object.
Click the Forward button on the toolbar or press ALT+RIGHT to move to the next object.
Click the Move One Level Up button on the toolbar to move one level up the section folder hierarchy.

NOTE. Navigating between the objects is available only in the desktop application.

To search for objects:

In the web application:

Click the Search button on the toolbar.
Press CTRL+F.

In the desktop application:

Select the Edit > Search main menu item.
Select the Search item in the object tree object's context menu.
Click the Search button on toolbar.
Press CTRL+F.

After executing one of the operations, the object search dialog box opens.

To view properties of the selected object:

Select the Object > Properties main menu item.
Select the Properties item in the object's context menu.
Click the Properties button on toolbar.

The Object Properties dialog box opens.

NOTE. Viewing object properties is available only in the desktop application.

To set up access permissions for the selected object, open the Properties side panel in the web application and the Access Control Settings dialog box in the desktop application:

In the web application, select the object.
In the desktop application execute one of the operations:

Select the Access Permissions item in the object's context menu.
Select the Object > Access Permissions main menu item.
Press the ENTER key.
Double-click the object name.

After executing the operations set required access control settings on the Properties side panel in the web application and in the Access Control Settings dialog box in the desktop application.

Access permissions for MDM dictionary elements can be set up only in the desktop application if the Elements have Access Permissions checkbox is selected in the MDM dictionary.

For details see the Access Permissions for MDM Dictionary Elements section.

To export object access permissions to file:

Select the Tools > Export Access Permissions main menu item.
Select export option in the drop-down list:

By Object Type. Access permissions in the file are granted based on object type.
By Folders, By Object Type. Access permission in the file is granted in the repository according to the existing hierarchy.

A standard dialog box for file saving opens where you need to specify name and path.

For details on export see the Exporting Security Policy and Access Permissions section.

NOTE. Export of access permissions for objects is available only in the desktop application.

To enable displaying of access permissions as icons:

Select the View > View Access Permissions main menu item.
Select the display option in the drop-down list:

Do Not Display Access Permissions. Disable viewing of access permissions.
Display Discretionary Permissions. Access permissions to objects for the separate object are displayed.
Display Mandatory Permissions/Security Levels. Access labels of the object are displayed.

After enabling one of the options object access permissions will be shown as icons in the navigator.

TIP. To display subjects with explicitly granted permissions, enable the appropriate parameter of the filter in the drop-down menu of the button on the toolbar.

NOTE. Access permissions can be displayed as icons only in the desktop application.

To get detailed information, see the Viewing Access Permissions section.

In the web application click the Save button on the toolbar or on the side panel.

In the desktop application execute one of the operations:

Select the Repository > Apply Security Policy main menu item.
Click the Apply Security Policy button on the toolbar.

NOTE. If section parameters have been changed, an attempt to go to another section of the security manager or to close it displays a request to apply changed settings.