| Product(s): | ProjectWise Caching Server | ||
| Version(s): | 08.09.04.xx | ||
| Area: | Security | ||
| Original Author: | Bentley Technical Support Group |
Problem
How do you assign Least restrictive rights to users from ProjectWise?
Solution
ProjectWise does not have specific "Deny" access entries, except NoAccess, that is treated as Deny All (read, write, file read, file write, change permissions, examine workflow access). All other specific access entries are only of "Allow" type. It is a common practice to apply cumulatively both Allow and Deny rights, and only when Allow & Deny collides on a specific right the least permissions win; and this rule is followed (whenever you have NoAcces in a set - it wins), but there are no specific Denies.
Future PW releases may implement specific Deny rights, combining inherited and directly applied rights, among other things.
Note that object access by a specific access list is determined by this priority: Specific User access entry, Group entries user belongs to, User List entries user belongs to, Everyone entry. This gives a little more flexibility to define the desired access.
In the example below the user is not getting the least restrictive permissions, but the cumulative permissions.
That is if for example Designers may create documents and Reviewers can edit, then the user who belongs to both groups can do both.
Example:
UserA belongs to two groups and both groups are assigned to the folder named TESTFOLDER:
Group1 -has full rights to TESTFOLDER
Group2 -has limited rights to TESTFOLDER
End result is that ProjectWise is providing least restrictive rights to the user instead of most restrictive rights (i.e. in the example above, the rights provided to the user are the rights from Group2)
Note however that if Group 2 had NO rights assigned to TESTFOLDER, then those rights would be assigned to the user.
See Also
External Links
Bentley Technical Support KnowledgeBase
Comments or Corrections?
Bentley's Technical Support Group requests that you please confine any comments you have on this Wiki entry to this " Comments or Corrections?" section. THANK YOU!