Access Protocol

To set up access protocol, use the Access Protocol section on the navigation panel.

NOTE. When roles of information security administrator and application administrator are separated, the Access Protocol section is available only for information security administrator.

Object. Name of the object the user is addressing to.
Identifier. Identifier of the object the user is addressing to.
Access Level. Displays the name of the object’s security level. This box is displayed if the mandatory access control method is used.

NOTE. The box is available only in the desktop application.

Workstation. The workstation, from which the object is accessed.
OS User. The operating system user accessing the object.
Platform user. User of Foresight Analytics Platform accessing to object.
IP Address. The IP address of the workstation that is used to get access to the object. When clusters are used in Linux OS, IP address of various objects is written to access protocol depending on the configuration: BI server, balancer, or workstation. For details about setting up workstation IP address logging see the IP Address Logging Settings in Linux OS section.

Time. The date and time of the operation.
Operation. The type of logged operation.
Result. Displays permissions for the requested action: successful - the user has required permissions; unsuccessful - the user has no permissions for this action. Records with failed actions are shown in contrasting color.

NOTE. If a child was called unsuccessfully, the result of calling all parent objects is also regarded as failed.

NOTE. This box displays additional information about the logged records:
- Adding, deleting, changing groups (adding users to a group).
- Adding, deleting, changing users (changing name, password, and so on).
- Granting or revoking (canceling) privileges.
- Changing mandatory policy: adding, deleting or changing access categories, adding, deleting or changing access category levels.
- Changing policies in the policies editor: enabling or disabling ISA, enabling or disabling discretionary or mandatory access control; changing password policy, autostart object.
- Changing access permission with specifying of information about previous and granted permissions (before/after). The comment can also contain information about changing of state for the Inherit Permissions from Parent Object checkbox.
- Changing object auditing.
- File path:
- - When the security policy is saved to or restored from a file.
  - When the access protocol is saved to a file.
  - On working with an update.
- File name:
- - On exporting a regular report or express report to file.
- The user logout is forced if the user is disconnected from the schema by an administrator.
- Adding, deleting and clearing the list of available printers.
- Information on executing or prohibiting printing on the device and changing the printer access level.
- Adding a printer for the subject.
- Version of Foresight Analytics Platform. It is displayed on system login.
- Information about the browser, in which the web application is opened (User-Agent). This information is not displayed by default. To display information about the browser on login to the system select the Log Information about User Agent checkbox in access control settings.

Connection. The box is filled only on update installation and contains the records on database connections opened during the update.

NOTE. The box is available only in the desktop application.