{"id":38026,"date":"2018-04-23T13:03:35","date_gmt":"2018-04-23T05:03:35","guid":{"rendered":"http:\/\/localhost\/help\/?page_id=38026"},"modified":"2024-07-05T10:38:00","modified_gmt":"2024-07-05T02:38:00","slug":"securing-an-explorer-object","status":"publish","type":"page","link":"https:\/\/oihelp.corporate.ifs.com\/help\/p2-server\/security\/securing-an-explorer-object\/","title":{"rendered":"Securing an Explorer Object"},"content":{"rendered":"\n

This article applies to versions 4.6 and later of IFS OI Explorer.<\/p>\n

Overview<\/h2>\n

In the Explorer module, workspaces are the only object that can be secured at the object level. An individual workspace is an object of the Workspaces resource<\/strong> in the Explorer module.<\/strong><\/p>\n

Securing workspaces relies on default object security, which provides the Everyone<\/strong> role with\u00a0implicit<\/em> view privileges for all objects in the system. When securing a workspace, you will need to remove the View privilege from the resource,<\/strong> as well as default object<\/strong> privileges for other roles.<\/p>\n

When applying object-level privileges, it is important to remember the cascading nature of privileges<\/strong> applied at the resource-level. If a role has explicit<\/em> View privileges (or higher) on the Workspaces\u00a0resource<\/strong>, all users with that role can view all workspaces.\u00a0<\/p>\n

<\/i>TOP TIP<\/span><\/p>\n

If you intend on changing security for workspaces, avoid explicitly setting privileges on the Workspaces resource in Server Management.<\/p>\n<\/div>\n

 <\/p>\n

Changing object-level security for individual workspaces is done directly within Explorer workspaces, and requires Explorer administrator privileges.<\/p>\n

Related: How Security Works<\/a>, How Roles Work<\/a>, How Object Access Works<\/a>,\u00a0 Add an Administrator<\/a><\/p>\n

What the Privileges Mean<\/h3>\n

Each resource may have different privileges. This is a list of the privileges for each resource, and what they mean.<\/p>\n

Additionally, Explorer Admin<\/strong> privileges\u00a0grants the user privileges to:<\/p>\n