Limiting folder access for Thin Client users

[rclark]

Hello,

I have seen solutions to similar requests in other posts, but none I believe that quite solve the issue for my needs.

I am looking to simplify the Project Explorer view for Thin Client users for reasons of security, and ease of use.

My Vault is set up with a 'Projects' folder, underneath which are multiple numbered folders for each project, each in turn have varying numbers of subfolders. There are something in the order of 500 project folders, each with around 3-4 subfolders in each.

We have 4 CAD seats which require access to all, but I am looking to restrict access for the Thin Client users to only 2 or 3 subfolders within a couple of specific Project folders. The rest is irrelevant for them and therefore would be needless 'clutter'.

We have the Thin Client set up to view only 'released' drawings, but this still allows the viewing and access of drawings in project folders that are irrelevant to the TC users.

I have experimented with right-clicking on project folders and setting security permissions (seemingly I have to grant 'Everyone' access and then deny access to TC users - just denying access for TC users alone seems to restrict access for everyone??), but to get this to work I would have laboriously do this individually on 500 project folders.

There seems to be no way to select multiple folders to apply the same settings to all at once.

It would be ideal if I could restrict the entire 'Project' parent folder, and just allow access to a handful of subfolders, but I believe access to folders higher up the tree is required.

I am hoping there is a more efficient way to do this!

[ihayesjr]

One method you could use is to make sure that each of the folders have category and lifecycle definition assigned to them. Based on the lifecycle definition of the folder, you can deny or allow Read access to the Thin client users.

[rclark]

Hi Irvin, thanks for your reply.

I must admit, I have no experience in applying lifecycles to anything other than File Categories, so do not know how how Folder lifecycles would react / interact with these.

However, would this still involve painstakingly applying settings to individual folders?

Is there no escaping having to change settings on individual folders whichever method of restriction I choose?

Thanks again.

[ihayesjr]

There will be some work for you to get your folders set up the way you want them.

Folder Security can propagate down to subfolders so that will help.

Make sure you have a complete understanding of how security works in Vault.

Review my AU class to see if that helps.

https://www.autodesk.com/autodesk-university/class/Security-Awakens-Defending-Against-First-Order-20...

[f_calebh]

@ihayesjr 

I think I know the answer to this, but I just want to confirm a related security question.

When setting up thin client settings, you don't really only have the option allow some users the ability see un-released documents and then restrict other users to only see only released documents, correct? The setting that controls this is basically an every user applied check-box?

Caleb

[ihayesjr · Accepted solution]

You are correct. The settings in the Thin Client is for all users using the Thin Client.

[rclark]

Hi Irvin,

Thanks for the link to the AU talk. Some very useful points discussed.

I should say that I am using Vault Pro 2020 - I assume the features discussed regarding Vault 2017 are largely the same, at least in terms of the solution you're suggesting?

Have a good weekend.

[ihayesjr]

That feature changed in 2017 and still applies to later versions.

[CGBenner]

@rclark  Did the information provided by @ihayesjr  answer your question? If so, please use Accept Solution so that others may find this in the future.  Thank you very much!

[rclark]

Hi,

I'm sure Irvin's suggestion will work, but I haven't yet had a chance to test it (Vault Administration is not my primary role) so whilst I apologise that it leaves this thread 'open' I can't really 'accept a solution' that I haven't tried.

That's effectively like signing a contract I haven't read!