Setting Up Discretionary Access Control Permissions

To set up discretionary access control permissions, use the Discretionary Access Control tab on the Properties side panel:

Discretionary access control parameter settings can be used to determine actions of a user or a user group to work with an object.

The Groups or Users box displays a list of security subjects that have permissions to execute operations with objects. If the subject is selected, a list of access permissions by general operations (edit permissions, read, edit, delete) is displayed that can be separately changed for each security subject.

NOTE. Multiple selection is available for object classes to set up parameters on the Access Permissions side panel. After the permissions are determined, access permissions are set for each selected class object.

To add security subjects to the list, click the Add button. In the Search Users and Groups dialog box select users and/or groups.

After the security subject is added, determine its permissions in the Permissions for Selected area by selecting checkboxes next to the selected operations. Checkboxes in the and columns can be selected. Deny operation has a higher priority.

Click the Delete button to delete the selected security subject.

NOTE. If object reading is denied for the user, this object will not be displayed in the object navigator for this user and on the Consists Of or Included In tabs for the objects that use the current object or are used by this object. If the user is denied to execute some operations with objects, the corresponding menu items are unavailable in the object navigator for this user. For example, if the user does not have the Delete or Write permissions for object, the user does not see the Edit, Delete, or Cut menu items.

To set permissions for operations that are not displayed in the Permissions for Selected list, click the Show Full List of Operations button.

Set permissions for each selected security subject. To do this, select the security subject in the Groups and Users box, set permissions for operations that must be allowed or denied in the Permissions for Selected list.

To distribute object permissions for child folders and objects:

Select the Replace Permissions for Folder Hierarchy and for Objects in Folders checkbox.
Click the Save button.

After a warning is displayed in the dialog box for viewing child object permissions, the specified permissions are displayed.

The Inherit Permissions from Parent checkbox enables the object permission inheritance mode from parent object, after which object permissions become identical to parent object permissions. A parent object is a folder or a container object (for example, assembly, modeling container) that contains an object.

NOTE. If the checkbox is selected, parent permissions, which differ from the child object permissions, are not shown in the dialog box for viewing child object permissions. To view inherited permissions, go to the Effective Permissions tab.

Dependent object permission setup enables the user to set up permissions for all objects used by this object or which use this object.

To set up access permissions for dependent objects, click the Dependent Objects button on the toolbar and set up permissions.

NOTE. Setup of dependent object permissions is available only for the selected object, on which other objects depend.