{"id":58478,"date":"2023-02-02T18:00:04","date_gmt":"2023-02-02T10:00:04","guid":{"rendered":"https:\/\/oihelp.corporate.ifs.com\/help\/?page_id=58478"},"modified":"2024-07-05T10:37:18","modified_gmt":"2024-07-05T02:37:18","slug":"securing-a-shift-log-object","status":"publish","type":"page","link":"https:\/\/oihelp.corporate.ifs.com\/help\/p2-server\/security\/securing-a-shift-log-object\/","title":{"rendered":"Securing a Shift Log Object"},"content":{"rendered":"\n

This article applies to versions 4.9.1 and later of IFS OI Explorer.<\/p>\n

An individual workbook is an object of the Workbooks resource<\/strong> in the Explorer module.<\/strong><\/p>\n

Securing workbooks relies on default object security, which provides the Everyone<\/strong> role with\u00a0implicit<\/em> view privileges for all objects in the system. When securing a workbook, you will need to remove the View privilege from the resource,<\/strong> as well as default object<\/strong> privileges for other roles.<\/p>\n

When applying object-level privileges, it is important to remember the cascading nature of privileges<\/strong> applied at the resource-level. If a role has explicit<\/em> View privileges (or higher) on the Workbooks resource<\/strong>, all users with that role can view all workbooks.\u00a0<\/p>\n

TIP:<\/strong> If you intend on changing security for workbooks, avoid explicitly setting privileges on the Workbooks resource in Server Management.<\/p>\n

Changing object-level security for individual workbooks is done directly within Workbook Studio, and requires Explorer administrator privileges.<\/p>\n

Related: How Security Works<\/a>, How Roles Work<\/a>, How Object Access Works<\/a>,\u00a0 Add an Administrator<\/a><\/p>\n

\n

What the Workbook Privileges Mean<\/h2>\n

Workbooks can be assigned View, Contribute and Publish privileges, which are explained in the following table:<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\u00a0<\/td>\nView<\/strong><\/td>\nContribute<\/strong><\/td>\nPublish<\/strong><\/td>\n<\/tr>\n<\/thead>\n
Move between shifts<\/td>\n\"\"<\/a><\/td>\n\"\"<\/a>(b)<\/sup><\/td>\n\"\"<\/a><\/td>\n<\/tr>\n
Read existing entries\u00a0(b)<\/sup><\/td>\n\"\"<\/a><\/td>\n\"\"<\/a>(b)<\/sup><\/td>\n\"\"<\/a><\/td>\n<\/tr>\n
Add comments to existing entries<\/td>\n\"\"<\/a><\/td>\n\"\"<\/a>(b)<\/sup><\/td>\n\"\"<\/a><\/td>\n<\/tr>\n
Share entries\u00a0(a)<\/sup><\/td>\n\"\"<\/a><\/td>\n\"\"<\/a>(c)<\/sup><\/td>\n\"\"<\/a><\/td>\n<\/tr>\n
Use form actions<\/td>\n\"\"<\/a><\/td>\n\"\"<\/a>(d)<\/sup><\/td>\n\"\"<\/a><\/td>\n<\/tr>\n
Add attachments to existing entries<\/td>\n\"\"<\/a><\/td>\n\"\"<\/a>(c)<\/sup><\/td>\n\"\"<\/a><\/td>\n<\/tr>\n
Add new entries<\/td>\n\"\"<\/a><\/td>\n\"\"<\/a>(c)<\/sup><\/td>\n\"\"<\/a><\/td>\n<\/tr>\n
Save filters on workbooks<\/td>\n\"\"<\/a><\/td>\n\"\"<\/a>(c)<\/sup><\/td>\n\"\"<\/a><\/td>\n<\/tr>\n
Publish workbooks<\/td>\n\"\"<\/a><\/td>\n\"\"<\/a><\/td>\n\"\"<\/a><\/td>\n<\/tr>\n
(a)<\/sup>\u00a0To share entries, you also need Contribute privileges on the Form used for the entry, and the Workbooks you are sharing From and To.<\/em><\/td>\n<\/tr>\n
(b)<\/sup>\u00a0Also need at minimum View privileges on the Form.<\/em><\/td>\n<\/tr>\n
(c)<\/sup>\u00a0Also need Contribute privileges on the Form used for the entry.<\/em><\/td>\n<\/tr>\n
(d)<\/sup>\u00a0Also need Contribute privileges on the Form used for the entry, and the Workbook you are sharing From.<\/em><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n

Tutorial: Changing Workbook Privileges<\/h2>\n

1. In IFS OI Explorer, open the workbook<\/a> you want to lock down.<\/p>\n

\"\"<\/a><\/p>\n

2. Click the \"\" Edit<\/strong>\u00a0button.<\/p>\n

\"\"<\/a><\/p>\n

3. Click the \"\" Settings<\/strong> Workbook<\/strong> buttton.<\/p>\n

\"\"<\/a><\/p>\n

4. For each role, click the relevant privileges you want to assign.<\/p>\n

\"\"<\/a><\/p>\n

What the Colours Mean<\/strong><\/p>\n

The privileges matrix is colour-coded to indicate the cascading nature of privileges. The colours are:<\/p>\n

\"\"\u00a0Grey: Privilege not granted
\n\"\"\u00a0Green tick: Privilege is explicitly granted, associated privileges will also be automatically granted.\u00a0
\n\"\"\u00a0Green dot: Privilege is granted because a higher level privilege has been granted on the object.
\n\"\"\u00a0Blue: Privilege is granted because it is inherited by a resource privilege.<\/p>\n

5. When you have finished, click Save Workbook.<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Related:<\/strong> Example Locking Down a Workspace<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

This article describes how to apply security to individual workspaces in Explorer.<\/p>\n

Read more<\/i><\/a><\/p>\n","protected":false},"author":29,"featured_media":37939,"parent":3652,"menu_order":33,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[11],"tags":[639,196,851],"class_list":["post-58478","page","type-page","status-publish","has-post-thumbnail","hentry","category-tutorial","tag-object-security","tag-security","tag-workbook","Version-4-9-1","Product-srv"],"_links":{"self":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/58478","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/users\/29"}],"replies":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/comments?post=58478"}],"version-history":[{"count":17,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/58478\/revisions"}],"predecessor-version":[{"id":67817,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/58478\/revisions\/67817"}],"up":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/3652"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/media\/37939"}],"wp:attachment":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/media?parent=58478"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/categories?post=58478"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/tags?post=58478"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}