{"id":38027,"date":"2023-01-19T13:04:21","date_gmt":"2023-01-19T05:04:21","guid":{"rendered":"http:\/\/localhost\/help\/?page_id=38027"},"modified":"2024-07-05T10:38:44","modified_gmt":"2024-07-05T02:38:44","slug":"securing-a-server-object","status":"publish","type":"page","link":"https:\/\/oihelp.corporate.ifs.com\/help\/p2-server\/security\/securing-a-server-object\/","title":{"rendered":"Securing a Server Object"},"content":{"rendered":"\n

This article applies to versions 4.9.1 and later of IFS OI Explorer. For more, see Release History<\/a>.<\/p>\n

Overview<\/h2>\n

In the Server module, several objects can be secured at the object level.\u00a0<\/p>\n

Default object security provides the Everyone<\/strong> role with\u00a0implicit<\/em> view privileges for all objects in the system. When securing a Server object, you will need to remove the View privilege from the resource,<\/strong> as well as default object<\/strong> privileges for other roles.<\/p>\n

When applying object-level privileges, it is important to remember the cascading nature of privileges<\/strong> applied at the resource-level. If a role has explicit<\/em> View privileges (or higher) on the\u00a0resource<\/strong>, all users with that role can view all objects for that resource.\u00a0<\/p>\n

TIP:<\/strong> If you intend on changing security for specific objects, such as hierarchies, avoid explicitly setting privileges on the relevant resource in Server Management.<\/p>\n

Changing object-level security for individual objects is done directly within the relevant configuration section Server Management, and requires Server administrator privileges.<\/p>\n

Related: How Security Works<\/a>, How Roles Work<\/a>, How Object Access Works<\/a>,\u00a0 Add an Administrator<\/a><\/p>\n

What the Privileges Mean<\/h3>\n

Each resource may have different privileges. This is a list of the privileges for each resource, and what they mean.<\/p>\n

Calculations<\/h4>\n

These privileges apply to calculation tags.<\/p>\n\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\nSee the calculation tag in Server Management and Explorer.\u00a0<\/td>\n<\/tr>\n
Edit (Configuration)<\/td>\nModify the calculation tag in Server Management.<\/td>\n<\/tr>\n
Delete\u00a0<\/td>\nDelete the calculation tag from Server Management.\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Datasources<\/h4>\n

These privileges apply to the datasource, and any tags or queries associated with the datasource.<\/p>\n\n\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\nSee the datasource and associated tags or datasets, in both Server Management and Explorer.\u00a0\u00a0<\/td>\n<\/tr>\n
Write<\/td>\nWrite to the tags or datasets associated with a datasource, from Explorer. Note: The Write flag on the datasource must be enabled for this to take effect. If the flag is not enabled, this privilege will have no effect.<\/td>\n<\/tr>\n
Edit (Configuration)<\/td>\nModify\u00a0\u00a0the datasource and associated tags or datasets, in Server Management.\u00a0\u00a0<\/td>\n<\/tr>\n
Delete\u00a0<\/td>\nModify\u00a0\u00a0the datasource and associated tags or datasets, from Server Management.\u00a0\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Digital States<\/h4>\n

These privileges apply to digital states and digital state sets.
\nNote<\/strong>: Digital states cannot be individually secured, they can only be secured via Role Privileges<\/a>.\u00a0<\/p>\n\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\nAll users are able to see all digital states, they cannot be individually secured.<\/td>\n<\/tr>\n
Edit (Configuration)<\/td>\nModify digital state sets and digital states, in Server Management.<\/td>\n<\/tr>\n
Delete\u00a0<\/td>\nDelete digital state sets and digital states, from Server Management.\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Entities<\/h4>\n

These privileges apply to entities.<\/p>\n\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\nSee the entity in Server Management and Explorer.\u00a0<\/td>\n<\/tr>\n
Edit (Configuration)<\/td>\nModify the entity in Server Management and Explorer.\u00a0<\/td>\n<\/tr>\n
Delete\u00a0<\/td>\nDelete the entity in Server Management and Explorer.\u00a0\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Forms<\/h4>\n

These privileges apply to forms.<\/p>\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\n\n
    \n
  • Allows users to view entries that use the Form.<\/li>\n
  • Users can add and reply to comments on entries that use the Form, but cannot make changes to the entries themselves.<\/li>\n
  • If a user does not have View privileges for a Form, but the Form is used inside a Workbook which they can see, then the entry table will display a message that the user does not have sufficient privileges to view the entries.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
Contribute<\/td>\n\n

Allows users to add, edit and delete entries that use the Form.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Hierarchies<\/h4>\n

These privileges apply to hierarchies.<\/p>\n\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\nSee the hierarchy in Server Management and Explorer.<\/td>\n<\/tr>\n
Edit (Configuration)<\/td>\nModify the hierarchy in Server Management and Explorer.\u00a0<\/td>\n<\/tr>\n
Delete\u00a0<\/td>\nDelete the hierarchy in Server Management and Explorer.\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Images<\/h4>\n

These privileges apply to images.
\nNote<\/strong>: Images cannot be individually secured, they can only be secured via Role Privileges<\/a>.\u00a0<\/p>\n\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\nAll users are able to see all images, they cannot be individually secured.<\/td>\n<\/tr>\n
Edit (Configuration)<\/td>\nModify the image in Server Management and Explorer.<\/td>\n<\/tr>\n
Delete\u00a0<\/td>\nDelete the image from Server Management.\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Links<\/h4>\n

These privileges apply to links.<\/p>\n\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\nSee the link and its link group, in Server Management and Explorer.<\/td>\n<\/tr>\n
Edit (Configuration)<\/td>\nModify the link and its link group, in Server Management.\u00a0<\/td>\n<\/tr>\n
Delete\u00a0<\/td>\nDelete the link and its link group, from Server Management.\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Named Lists<\/h4>\n

These privileges apply to named list values.<\/p>\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\n\n

See and use this value on a form that uses this list.<\/p>\n

If a user does not have View privileges for a list value, but the list is used inside a Form which they can see, then the list value will not be visible to the user in any Form that uses that list.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Templates<\/h4>\n

These privileges apply to templates and their associated attributes.<\/p>\n\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\nSee the template and associated attributes, in Server Management and Explorer.<\/td>\n<\/tr>\n
Edit (Configuration)<\/td>\nModify the template and associated attributes, in Server Management.\u00a0<\/td>\n<\/tr>\n
Delete\u00a0<\/td>\nDelete the template and associated attributes, from Server Management.\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Units<\/h4>\n

These privileges apply to units.
\nNote<\/strong>: Units cannot be individually secured, they can only be secured via Role Privileges<\/a>.\u00a0<\/p>\n\n\n\n\n\n\n
Privilege<\/strong><\/td>\nWhat it means<\/strong><\/td>\n<\/tr>\n
View<\/td>\nAll users are able to see all units, they cannot be individually secured.<\/td>\n<\/tr>\n
Edit (Configuration)<\/td>\nModify the unit in Server Management.<\/td>\n<\/tr>\n
Delete\u00a0<\/td>\nDelete the unit from Server Management.\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Where the Privileges are Found<\/h3>\n

To access an object's privileges in Server Management, select the relevant toolbar component and follow the steps in the table below.<\/p>\n

Note:<\/strong> Not all objects can be individually secured.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n
Resource<\/strong><\/td>\nToolbar Component<\/strong><\/td>\nSelect the following:<\/strong><\/td>\n<\/tr>\n
Hierarchies<\/strong><\/td>\n\n

Hierarchies<\/strong><\/p>\n

\"\"<\/p>\n<\/td>\n

\n

1. One of the hierarchies on the list<\/p>\n

\"\"<\/a><\/p>\n

2. One of the locations on the list<\/p>\n

\"\"<\/a><\/p>\n

3. Edit<\/p>\n

\"\"<\/p>\n

Else, select Create New Hierarchy<\/p>\n

\"\"<\/p>\n<\/td>\n<\/tr>\n

Entities<\/strong><\/td>\n\n

Entities<\/strong><\/p>\n

\"\"<\/p>\n<\/td>\n

\n

1. One of the entities on the list<\/p>\n

\"\"<\/a><\/p>\n

2. Edit (Details)<\/p>\n

\"\"<\/p>\n

Else, select Create New Entity<\/p>\n

\"\"<\/p>\n<\/td>\n<\/tr>\n

\n

Datasources<\/strong><\/p>\n<\/td>\n

\n

Connections<\/strong><\/p>\n

\"\"<\/p>\n<\/td>\n

\n

1. Datasources<\/p>\n

\"\"<\/p>\n

2. One of the datasources on the list<\/p>\n

\"\"<\/a><\/p>\n

Else, select Create New Datasource<\/p>\n

\"\"<\/p>\n<\/td>\n<\/tr>\n

\n

Calculations<\/strong><\/p>\n<\/td>\n

\n

Configuration<\/strong><\/p>\n

\"\"<\/p>\n

\u00a0<\/strong><\/p>\n<\/td>\n

\n

1. Calculations<\/p>\n

\"\"<\/p>\n

2. One of the calculations on the list<\/p>\n

\"\"<\/a><\/p>\n

Else, select Create New Calculation<\/p>\n

\"\"<\/p>\n<\/td>\n<\/tr>\n

\n

Links<\/strong><\/p>\n<\/td>\n

\n

Configuration<\/strong><\/p>\n

\"\"<\/p>\n<\/td>\n

\n

1. Links<\/p>\n

\"\"<\/p>\n

2. One of the links on the list<\/p>\n

\"\"<\/a><\/p>\n

Else, select Create New Link<\/p>\n

\"\"<\/p>\n<\/td>\n<\/tr>\n

\n

Named Lists<\/strong><\/p>\n<\/td>\n

\n

Configuration<\/strong><\/p>\n

\"\"<\/p>\n

\u00a0<\/strong><\/p>\n<\/td>\n

\n

1. Named Lists<\/p>\n

\"\"<\/p>\n

2. One of the Named Lists on the list<\/p>\n

\"\"<\/a><\/p>\n<\/td>\n<\/tr>\n

\n

Templates<\/strong><\/p>\n<\/td>\n

\n

Configuration<\/strong><\/p>\n

\"\"<\/p>\n<\/td>\n

\n

1. Templates<\/p>\n

\"\"<\/p>\n

2. One of the Templates on the list<\/p>\n

\"\"<\/a><\/p>\n

Else, select Create New Template<\/p>\n

\"\"<\/p>\n<\/td>\n<\/tr>\n

Security<\/strong><\/td>\n\n

Security<\/strong><\/p>\n

\"\"<\/p>\n<\/td>\n

\n

1. Privileges<\/p>\n

\"\"<\/p>\n

2. One of the roles on the list<\/p>\n

\"\"<\/a><\/p>\n<\/td>\n<\/tr>\n

Forms<\/strong><\/td>\n\n

Shift Log Admin<\/strong><\/p>\n

\"\"<\/p>\n<\/td>\n

\n

1. One of:<\/p>\n