Granting Item-Level Access Rights

This topic presents the guidelines for granting item-level access rights.

Item-Level Access Rights

Although access rights can be set on individual items, this is rarely done. For example, if you really need to allow only one person to know about a particular file, you can give only that person access rights to that file. However, by default, the owner of the file and anyone belonging to a group with the correct privileges can still see that file.

To ensure that only that one person can access the file, you would have to stop the StarTeam Server from checking for privileges. Then the access to every object would be controlled solely by access rights.

Like folders, items in a child view retain the access rights they had in the parent view until they branch into new objects. Items lose their access rights only when branching.

Moving Folders or Items When you move a folder or an item, the access rights set for it at the folder or item level go with it. It also has the same behavior, which either allows it or stops it from branching on change.
Sharing Folders or Items

When you share a folder or item, the access rights set for it at the folder or item level accompany it, until the folder or item branches.

When you share a folder or item, its behavior may change. When shared, the behavior immediately becomes able to branch on change, even if the Branch On Change check box was disabled in the original location. Whether the Branch On Change check box is selected or cleared depends on the property setting for the destination view Set Items That Are Shared Into View To Branch On Change.

When the folder or item branches in its new location, a new object is created in the repository, and that new object initially has no access rights at the folder or item level.

Back to top

Generic Item Access Rights

The following table describes the access rights that are available from the File nodes in the Project Access Rights, View Access Rights, Folder Access Rights, and File Access Rights dialog boxes.

See item and its properties

See files in the files list (upper pane) and view file properties by selecting File > Properties.

Modify properties

Change the file properties. Modifiable properties include the archive/file name, description, executable bit setting (useful only for non-Microsoft Windows platforms), compression, storage options, and custom properties. If used, an alternate property editor (APE) may restrict the properties that can be modified and the users who can modify them still further.

Delete from folder

Delete files from their folders.

Change item access rights

Change access rights for the files. If you change this setting, be sure that you remain one of the users who can change access rights.

See history

See file history in the history pane.

Perform maintenance

Change the revision comments for past revisions.

Set exclusive locks

Lock files exclusively.

Break exclusive locks

Remove someone else’s exclusive lock on the files.

Back to top