The Access-Editor
With the Access editor you can determine for a folder (and its subfolders), which user may see, execute or edit which report (or other files).
Function of the access control
The access control within instantOLAP is directory-oriented and works on the basis of rules.
Directory-oriented means that you configure the access to reports and other files in the directory in which the files lie. Should a directory have no access rules, then the rules from the parent directory are automatically used, so that you can also control the access for all underlying subfolders of a directory. Theoretically it is even possible to configure the rules for all files in the uppermost directory - the Repository.
Processing of the rules
Often there is more than one rule in a directory - then from the rules are checked from the first to the last, until a rule which applies on the current user, the desired operation and the affected file. According to the kind of the rule it permits (then it has the type "Grant") or forbids (then it has the type "Deny") the execution of the operation.
The order of the rules is very important. Should a rule apply, all following rules are no more considered by the system.
Matching of rules
Whether a rule matches or not, depends on the entries in the columns "Role", "User", "Action" and "Entry". In these columns the user names, groups, operations and entries (filenames) are configured to which a rule should apply (unless you use the wildcard "*" in any of the columns, which then matches for any user, group etc).
- User: The name of the user who would like to perform an operation. Should the name of the user match with this field or the wildcard "*" is used here, then this column matches.
- Role: The name of an user-group (role). Should the current user own this role or "*" is used as a wildcard, then this column matches.
- Action: There are two access levels: "Execute", and "Admin". Also, the wildcard "*" can be used (which has the same meaning as "admin").
- Entry: This is a pattern for the name of the files to which this rule applies. You may also use the Wildcard "*" here - however, in difference to the other columns the wildcard can also match only parts of the name. E.g. a pattern "demo* " matches for all files which begin with "demo". A pattern "*.config" matches for all configurations etc.
Should you also want to configure the rules for files from its subdirectories in a directory, you must put the directory name of the subdirectory (followed by a slash "/") before the filename. E.g. a pattern "demo/*" matches for all files from a subdirectory named "demo".
Opening the Access-Editor
Use the context menu of a directory to configure the access rules for a directory.
Open the context menu of the directory with the right mouse button and use you the menu item "Edit access.." This opens the Access editor.
Alternatively you can also open the directory editor and switch to the Access editor using the tabulator "Access". You also reach the directory editor with the context menu (using the menu item "Edit ...) or by dragging the directory on the surface of the Workbench using drag&drop.
Editing the entries
You can create new entries, move entries or delete entries. They with the tool bar at the right margin of the editor.
Editing entries
To change the values of an entry, you must click with the mouse in a column within the table. Now you can change the value and confirm the update with the Enter key.
Creating new entries
Use the button "Add new rule" to add a new rule to the list. Then an empty rule is inserted at the end of the list which you can edit now.
Moving the entries
With the arrows from the tool bar you can change the order of the entries.
Choose the entries which you would like to move and press the suitable button. Then the entries are moved one position in the list upwards or down.
Deleting entries
Use the button "Delete rule" to delete the currently selected rules from the list.
Saving the settings
You can save the changed settings any time using the save button from the tool bar of the Workbench.
Alternatively you can also use the menu item "Save" or use the keyboard shortcut CTRL-S if the access editor is the currently selected window.
If you made changes in the configuration and then close the editor without having saved before, then the Workbench will point out you to these changes and ask whether they should be saved.
