Security Permissions

A permission regulates which users that can gain access to an object and in what manner. Permissions are granted to individual user accounts or security groups. Permissions can be granted to all objects of a given type, to individual objects and to object properties.

Object Permissions that can be Granted to a User

The number of permissions that can be granted to a user is determined by the security setup for the Object Class.

Permission	Description
Find And List	Allows the user to find an object and view it in lists. Detailed information about the object can not be accessed.
Read and Execute	Allows the user detailed reading access to an object. If the object has active content, it can also be executed.
Set Search Criteria	Allows the user to search for objects using advanced search. Can only be granted to all objects.
Create	Allows the user to create an object. Can only be granted to all objects.
Modify	Allows the user to modify an object.
Delete	Allows the user to delete an object.
Read Event History	Allows the user to read the Event History for an object. Can only be granted if auditing is activated for the Object Class.
Modify Auditing	Allows the user to modify the auditing setup for an object. Can only be granted if auditing is activated for the Object Class, and users are allowed to modify auditing on individual objects.
Insert Objects In Folders	Allows the user to insert mail, files and folders in an object.
Read Permissions	Allows the user to read permissions for an object.
Modify Permissions	Allows the user to modify permissions for an object.
Set Ownership	Allows the user to take ownership for an object, or to transfer the ownership to another user. This permission can not be granted to all objects unless users are allowed to grant permissions to individual objects.

Grant Permissions to All Objects to a Security Group

Only trusted users or users with app model admin rights have access to grant permissions to all objects.

To grant permissions to all objects, the option Allow granting of permissions to all objects has to be selected in the security setup for the Object Class. Permissions can only be granted to security groups and not individual user accounts.

Open Genus Studio.
In the Directory tree, expand the Security folder, and then click the Permissions folder.
In the table to the right, right-click the Object Class which you want to grant permissions to, and then in the shortcut menu, click Properties.
Click the Security tab.
To set permissions for a group that does not appear in the Group names box, click Add. In the Select Groups dialog box, type the name of the group you want to set permissions for and then click Check Names. To allow or withdraw permissions from an existing group, click the name of the group.
To allow a permission, in the Permissions box, select the Allow check box. To withdraw a permission, clear the Allow check box.
To withdraw all permissions from an existing group, click Remove.

To view the effective permissions granted to a group, click Advanced, and then click Effective Permissions.

Grant Permissions to All Objects Satisfying Conditions to a Security Group

Only trusted users or users with app model admin rights have access to grant permissions to all objects satisfying conditions.

To grant permissions to all objects satisfying conditions, the option Allow granting of permissions to all objects satisfying conditions has to be selected in the security setup for the Object Class. Permissions can only be granted to security groups and not individual user accounts.

Open Genus Studio.
In the Directory tree, expand the Security folder, and then click the Permissions folder.
In the table to the right, right-click the Object Class which you want to grant permissions to, and then in the shortcut menu, click Open.
To set permissions for a group that does not appear in the Group names box, click Add. In the Select Groups dialog box, type the name of the group you want to set permissions for and then click Check Names. To allow or withdraw permissions from an existing group, click the name of the group.
To allow a permission, in the Permissions box, select the Allow check box. To withdraw a permission, clear the Allow check box.
To specify a condition for a permission, in the Condition column, click ... and enter the condition. If no condition is given, the permission is always granted.
To withdraw all permissions from an existing group, click Remove.

To view the effective permissions granted to a group, click Advanced, and then click Effective Permissions.

Grant Permissions to an Individual Object to a User

Required security permission: Modify Permissions

To grant permissions to an individual object, the option Allow granting of permissions to individual objects has to be selected in the security setup for the Object Class.

Select the object you want to grant permissions to.
In the File menu, click Properties.
Click the Security tab.
To set permissions for a group or user that does not appear in the Group or user names box, click Add. Type the name of the group or user you want to set permissions for and then click Check Names. To allow or withdraw permissions from an existing group or user, click the name of the group or user.
To allow a permission, in the Permissions box, select the Allow check box. To withdraw a permission, clear the Allow check box.
To withdraw all permissions from an existing group or user, click Remove.

To change the ownership of the object, click Advanced. To take ownership, click Take Ownership. To transfer the ownership to another user, click Set Ownership. Type the name of the user you want to set as owner for the object and then click OK. The owner of an object can always change permissions on it, regardless of any existing permissions that protect the object. If you are not the owner of the object, you need the permission Set Ownership to change the ownership of the object.

If the current object represents a composition, that is, an object composed of objects from one or more Object Classes, you can grant permissions to all objects within the composition. For example, an Object Class Project is composed of two other Object Classes, Activity and Activity Code. Permissions to activities are granted for each activity. However, permissions to add and modify activity codes in a given project, should only be granted to a limited number of users. If a user has sufficient permissions, these permissions should apply to all activity codes in the given project. That is, you do no want to grant permissions for each activity code. To grant permissions to all objects within a composition, the option Allow granting permissions to all objects within composition has to be selected in the security setup for the Object Classes which is part of the composition (in the example above, this option should be selected for the Object Class Activity Code). To grant permissions to all objects within a composition, do the following:

Click Advanced.
In the Permissions list, click the Object Class which you want to grant permissions to, and then click Modify.
To set permissions for a group or user that does not appear in the Group or user names box, click Add. Type the name of the group or user you want to set permissions for and then click OK. To allow or withdraw permissions from an existing group or user, click the name of the group or user.
To allow a permission, in the Permissions box, select the Allow check box. To withdraw a permission, clear the Allow check box.
To withdraw all permissions from an existing group or user, click Remove.

To view the effective permissions granted to a group or user, click Advanced, and the click Effective Permissions.

Property Permissions that can be Granted to a Security Group

The number of permissions that can be granted to a security group is determined by the security setup for the property.

Read. Allows the user to read data for the property.
Create. Allows the user to modify data for the property when creating a new object.
Modify. Allows the user to modify data for the property for an existing object.

Grant Permissions to a Property to a Security Group

Only trusted users or users with app model admin rights have access to grant permissions to a property.

To grant permissions to a property, the option Allow granting of permissions to property has to be selected in the security setup for the property. Permissions can only be granted to security groups and not individual user accounts.

Open Genus Studio.
In the Directory tree, expand the Security folder, and then click the Permissions folder.
In the table to the right, find the Object Class containing the property you want to grant permissions to. Click to view all properties which allows permissions to be granted to a security group.
Right-click the property which you want to grant permissions to, and then in the shortcut menu, click Properties.
Click the Security tab.
To set permissions for a group that does not appear in the Group names box, click Add. In the Select Groups dialog box, type the name of the group you want to set permissions for, and then click Check Names. To allow or withdraw permissions from an exisiting group, click the name of the group.
To allow a permission, in the Permissions box, select the Allow check box. To withdraw a permission, clear the Allow check box.
To withdraw all permissions from an existing group, click Remove.

To view the effective permissions granted to a group, click Advanced, and then click Effective Permissions.