Granting Folder-Level Access Rights
This topic presents the guidelines for granting folder-level access rights.
Folder-Level Access Rights Overview
Setting access rights at the folder level is usually done when you want to allow certain groups (but not other groups) to access a particular branch of the folder hierarchy. For example, you may want only the Writers group to be able to access the branch that has User Manual as its root folder.
Setting access rights at the folder and the item levels has more consequences than setting rights at higher levels. When a child view is derived from a parent view, as all reference and most branching views are, it initially contains objects that belong to its parent. In branching views, these objects can branch into new objects that exist only in the child view. Just as a new view has no view-level access rights, folders and items that branch into new objects initially have no access rights at the folder or item level.
This Folder and Child Folder Nodes |
The folder level has two nodes: This Folder, for the selected folder, and Child Folders, for the other folders in the folder hierarchy of the branch. This feature allows you to set different access rights for each node. In the client, the root folder of a view can be indistinguishable from that view. If the view is the root (or initial) view of a project, the root folder can be indistinguishable from that project. Using the This Folder node to set access rights for the root folder can therefore affect a user’s access to a view. If the view is the root view, it can also affect the user’s access to the project. Therefore, most administrators avoid setting folder-level access rights on a root folder, as these rights may interfere with view-level or project-level rights. For example, suppose the Developers group is not granted the right to see the User Manual folder and that this folder is the root of a reference view. Then members of the Developers group cannot open that view, even if view-level access rights allow them to see the view. An error message appears when they try to open the view. Users who can see a project but not its root view also see an error message. |
Access Rights of Child Views | If a child view includes child folders that have access rights in the parent view, its access rights depend upon whether it is a reference view or a branching view. |
Access Rights in a Reference View |
The access rights in a reference view at the folder level are not independent of the access rights at the folder level in the parent view, as no branching will ever occur. You can see these access rights from either view if you have the rights to do so. If you change access rights in the reference view, you simultaneously change the access rights in the parent view (and vice versa) because the folder in the reference view is the same object as the folder in the parent view. |
Access Rights in a Branching View |
If the child view is a branching view, the access rights in the child view at the folder level are independent of the access rights at the folder level in the parent view, but only after the folder in the branching view actually branches. Initially, any folder you see in the branching view is the same object that exists in the parent view. Therefore, it has the same access rights in both views. Initially, you can change access rights in the parent view (and vice versa), because the folder in the branching view is the same object as the folder in the parent view. Once the folder branches, however, a new object for that folder is created in the branching view. This object begins a life cycle of its own and no longer has any access rights at the folder level. Note: Remember that branching a folder does not branch any of the folder’s contents. Each item is the folder is treated separately. The behavior of folders in a branching view affects the access rights:
|
Folder Access Rights
When you select the Folder Tree > Advanced > Access Rights command to display the Folder Access Rights dialog box, you see two folder nodes. The rights available from This Folder node apply to the selected folder only. The rights available from the Child Folders node apply to all the child folders of the selected folder. The dialog and following table refer to the current folder. The table describes the access rights that are available from the This Folder node in the Folder Access Rights dialog box.
Note: Because This Folder has no Generic item container subcategory for access rights, container rights for This Folder are on its Child Folders node. If This Folder is the root folder, these rights are set on the Child Folders node of the View Access Rights dialog box.
Generic object rights
See item and its properties |
View this folder’s
Name,
Exclude, and
Files tabs, which become available when
Folder > Properties is selected. The
History tab is controlled by the
|
Modify properties |
Change folder properties on the folder Name and Exclude tabs. Properties include folder name, description, use of inherited and local exclude lists, and contents of the local exclude list. If the folder is not a root folder, the working folder and alternate working folder settings are also properties. For root folders, the working folders are view properties and not controlled by this access right. |
Delete from folder |
Delete this folder from its parent folder. Be aware that if you can delete any of this folder’s parent folders, you can still delete this folder. |
Change item access rights |
Change the access rights for this folder. If you change this setting, be sure that you remain one of the users who can change access rights. |
See history |
See this folder’s History tab, which is available when Folder > Properties is selected. |
Perform maintenance |
Change the revision comments for past revisions. |
Set exclusive locks |
Lock folders exclusively. |
Break exclusive locks |
Remove someone else’s exclusive lock on the folders. |
Label Rights
Attach/Adjust view labels |
Add a view label to this folder. Move a view label from one revision of this folder to another. This right controls direct manipulation of labels for this folder at the folder level. It does not stop users from attaching a view label to this folder when a view label is created. |
Detach view labels |
Remove a view label from this folder. Be aware that if users can delete view labels, they can detach a view label from this folder by deleting the view label from the view, regardless of the setting for this right. |
Attach/Adjust revision labels |
Add a revision label to this folder. Move a revision label from one revision of this folder to another. This right controls direct manipulation of revision labels for this folder at the folder level. |
Detach revision labels |
Remove a revision label from this folder. Be aware that if users can delete revision labels, they can detach a revision label from this folder by deleting the revision label from the view, regardless of the setting for this right. |
Link Rights
See links |
See the links involving this folder. |
Create links |
Link this folder to other folders and items. |
Modify links |
Change a link for this folder. |
Delete links |
Delete a link for this folder. |
Child Folder Access Rights
When you select the Child Folders node from the Folder Access Rights dialog box, the available rights apply to the child folders of the selected folder. The Child Folders node is also available from the View Access Rights dialog box and the Project Access Rights dialog box. In these cases, the rights apply to all child folders in the current view or all the child folders in the project, respectively.
Below is a description of the access rights available from the Child Folders nodes in the Project Access Rights, View Access Rights, or Folder Access Rights dialog boxes.
Generic item rights
See item and its properties |
See the selected folder’s child folders or the selected project’s or view’s folders in the folder hierarchy in the left pane on the screen. You can also view the Name and Exclude Properties dialogs, which open when Folder > Properties is selected. The History tab is controlled by the See folder history access right. |
Modify properties |
Change folder properties on the Name and Exclude tabs for child folders. The properties include the folder’s name, description, use of inherited and local exclude lists, and the contents of the local exclude list. If a child folder is not a root folder, the working folder and alternate working folder settings are folder properties. If it is the root folder, the working folders are view properties and not controlled by this access right. |
Delete from folder |
Delete the selected folder’s child folders or the selected project’s or view’s folders from their parent folders. Be aware that if you can delete any of this folder’s parent folders, you can still delete this folder. |
Change item access rights |
Change the access rights for the selected folder’s child folders or the selected project’s or view’s folders. If you change this setting, be sure that you remain one of the users who can change access rights. |
See history |
See the History tab, which is available when Folder > Properties is selected. This action applies to the selected folder’s child folders or the selected project’s or view’s folders. |
Perform maintenance |
Change the revision comments for past revisions. |
Set exclusive locks |
Lock child folders exclusively. |
Break exclusive locks |
Remove someone else’s exclusive lock on the child folders. |
Label rights
Attach/Adjust view labels |
Add a view label to the selected folder’s child folders or the selected project‘s or view’s folders. Move a view label from one revision of a child folder to another. This right controls direct manipulation of view labels for child folders at the folder level. It does not stop users from attaching a view label to child folders when a view label is created. |
Detach view labels |
Remove a view label from the selected folder’s child folders or the selected project’s or view’s folders. Be aware that if users can delete view labels, they can detach a view label from child folders by deleting the view label from the view, regardless of the setting of this right. |
Attach/Adjust revision labels |
Add a revision label to the selected folder’s child folders or the selected project’s or view’s folders. Move a revision label from one revision of a child folder to another. This right controls direct manipulation of revision labels for child folders at the folder level. |
Detach revision labels |
Remove a revision label from the selected folder’s child folders or the selected project’s or view’s folders. Be aware that if users can delete revision labels, they can detach a revision label from this folder by deleting the revision label from the view, regardless of the setting of this right. |
Link rights
See links |
See the links involving the selected folder’s child folders or the selected project’s or view’s folders. |
Create links |
Link the selected folder’s child folders or the selected project’s or view’s folders to other folders and items. |
Modify links |
Change a link for the selected folder’s child folders or the selected project‘s or view’s folders. |
Delete links |
Delete a link for the selected folder’s child folders or the selected project’s or view’s folders. |
Generic item container rights
Create and place in folder |
Create a folder in a parent folder, view, or project in which the Child Folder Access Rights dialog box has this option. |
Share/Move out of folder |
Share or move a folder in a parent folder, view, or project if its Child Folder Access Rights dialog has this option. Be aware that the access rights set for that folder and its contents, along with any rights set for specific child folders and items within that branch of the folder hierarchy, accompany the folder into the new folder. |
Change behavior or configuration |
Change the branching ability and configuration of folders that reside in a parent folder, view, or project if its Child Folder Access Rights dialog box has this option. |