Folder securtity

[xavier_dumont1]

Hi all,

On a Vault Professional 2013:

Can somebody explain me exactly what is the drop down "Security Mode" and his incidence?

Wikihelp don't give informations about that (see image in attach)

Thanks in advance.

[luttena]

Hello,

Thank you for posting this question. The Security Mode field has always been a part of this dialog. What it has always done is it tells you what kind of security is applied to that folder. For example, the default security is 'Role-based security only'. This means that no security has specifically been applied to that folder and the role-based security will be the only level of restriction.

If you add security to the folder (users and groups), the field reads Object-based security. Last, if there are security overrides applied to the folder then the field will read 'System or overridden security'.

The drop-down was added with the addition of lifecycle states on folders. If you change the category of a folder and a lifecycle state has been applied to it, any security configured in the lifecycle definition editor will be applied as an override on that folder. Remember, if an override is removed, then the object-based or role-based security is still in place.

Since you can have the 2 levels of security (object or role-based and override), you may want to see what they both are and you might even want to modify one of them. Use the drop down to view or edit the level of security on the folder.

Does this help make it a bit more clear?

Adam

[radugc]

Hi,

Our folders inside Vault are object-based security with the Security Override box unchecked and a list of groups with different read / modify / delete permissions.

I have noticed that if you removed all the groups, the security changes to role-based security only and the object-based security is not available any more.

Could you please explain?

Also, what would be the best practice with regards to security? Should all folders be set with role-based security except the ones that have the security override box checked and a couple of groups listed down in the access controll list?

Could you please advise?

Many Thanks, Radu