Privilege Reference

This section describes privileges and provides the rules that can apply to each privilege.

For a detailed description of each rule, see Privilege Rules.

Privileges are classified into the following areas:

Area | Description
Administration Privileges | Privileges to perform various administrative functions within the Dimensions CM database, for example to assign roles to users, or update the properties of a deployment area. The settings for these privileges apply to all products in the base database. They are subdivided into: Process Management Area Management Other Administration Administration privileges apply to all products in the base database. For details, see Administration Privileges.
Product Level Privileges | Privileges to perform operations on classes of Dimensions CM objects within a specified product, for example to promote an item or create a baseline. The settings you make in the Administration Console for these privileges only apply to your current product. The object classes are: Product. See Product Level Privileges. Design Part. See Design Part Level Privileges. Request. See Request Level Privileges. Item. See Item Level Privileges. Baseline. See Baseline Level Privileges. Project/stream. See Project/Stream Level Privileges. Release. See Release Level Privileges. Product-level privileges apply only to your currently selected product.

NOTE about Rollback privileges

Access to all rollback operations is controlled through the use of the item rollback privilege. Although they are displayed through the user interface, the roll back request and roll back baseline privileges are not used, and will be ignored. Future releases of Dimensions will provide a single rollback privilege to control access to these operations.

NOTE about default grant rules for Download Files from Project privilege

When you create a new base database or upgrade an existing installation, the default grant rules for the Update Files from Project/Stream and Deliver Files into Project/Stream privileges include the User holds any role on the product owning the object rule. As a result, there is a security issue where certain users are able to download and upload files from any project in the product including those to which they should not have access. To correct this, you must remove the User holds any role on the product owning the object rule from the grant rules for the Update Files from Project/Stream and Deliver Files into Project/Stream privileges.

Related Topics

Managing Privileges

Managing Roles