Access Control
Once the basic security setup is completed in EPM Security Administrator or PPM Administrator, data access control is configured in Cobra.
Each file type in Cobra—such as project, calendar, resource, rate, code, report, and configuration—includes a Properties dialog box and a New File Wizard, both featuring Access Control. This Access Control enables you to secure files and assign access rights to individual users or groups. When a group is granted access to a file, the primary role of each user in the group determines their level of access within the file unless an overriding role is specified. For instance, a user’s primary role will dictate whether they can edit the budget in a project.
The tables below list the Cobra files and components, along with the locations where their access rights can be managed.
| File | Access Control Tab | Access Control Page |
|---|---|---|
| Project | Access Control Tab of the Project Properties Dialog Box | Access Control Page of the New Project Wizard |
| Calendar | Access Control Tab of the Calendar File Properties Dialog Box | Access Control Page of the New Calendar File Wizard |
| Code | Access Control Tab of the Code File Properties Dialog Box | Access Control Page of the New Code File Wizard |
| Rate | Access Control Tab of the Rate File Properties Dialog Box | Access Control Page of the New Rate File Wizard |
| Report | Access Control Page of the Report Wizard | |
| Integration Configuration | Configuration Security Dialog Box |
Access Control Page of the Integration Wizard-Actuals Access Control Page of the Integration Wizard-Ancillary Access Control Page of the Integration Wizard-Scheduling Tools |
| wInsight Configuration | ||
| Cost Data Configuration | ||
| Batch Reports |
| Component | Dialog Box |
|---|---|
| Change Access Rights | Change Access Rights Dialog Box |
| Manage Views | Manage Views Dialog Box |
| Sorts and Filters |
New Filter Expression Dialog Box of the Report Wizard Edit Filter Expression Dialog Box of the Report Wizard |
To provide access control to a file, you must be one of the following: a member of the SYSADMIN group, the owner of the file, or have OWNER_DELEGATE rights on the file.
| Field | Description |
|---|---|
| Owner |
This field displays the user ID of the owner of the file. By default, this field displays the user ID of the user creating the file. You can assign only a single owner to each file. Note: This field is always disabled unless you are the owner of the file or a member of the SYSADMIN group. To change the
Owner field of a particular file, use the Access Control tab of the file’s Properties dialog box.
|
| User | Users refer to individuals who can be given the right to open and view the file. |
| Group |
Groups are composed of individual users and provide a convenient way of assigning multiple users rights to the file. A user can be a member of any number of groups. The SYSADMIN group is a special group that has access to administrative information. Use the WORLD group to easily provide access to all users. For example, use this group to provide all users with read access to the integration configuration. All users you define in the EPM Security Administrator or PPM Administrator automatically become members of the WORLD group in Cobra. Since this special group does not require you maintain the users, you cannot select the WORLD group in the Group list in EPM Security Administrator or PPM Administrator. Alternatively, you can add the WORLD group to the Access Control tab and select the Read Only option, allowing all users to view but not edit the data. Disabling the WORLD Group in PPM Administrator When you use PPM Administrator and select the Disable WORLD Group option on the System Settings tab of the System form, all data access for the WORLD group will be removed from all PPM products. In Cobra, the WORLD group is removed from any areas that include it in the access control list, such as:
However, Cobra does not automatically clear the WORLD group access rights for sorts and filters. You can still see the WORLD group listed in applicable fields, but Cobra ignores the reference. Once you change the selection to another group, you cannot reselect the WORLD group. Note: Sorts and filters can only be shared with one group at a time.
|
| Role | Roles define the permissions of a user set in EPM Security Administrator or PPM Administrator. Changing this field does not override the primary role defined in EPM Security Administrator or PPM Administrator. |
| Read Only |
When selected, this option allows the file creator or any member of the SYSADMIN group to grant Read Only access to a user or group. For existing files, only the owner or a member of the SYSADMIN group can change the security settings and delete and restore the file. You can assign multiple users, groups, or roles to a file. |