StarTeam Access Rights

0 Likes

Access Rights Summary

 

Group Privileges 

The privileges assigned to a group may allow members of that group to access objects and perform operations that they are otherwise not allowed to do. In other words, privileges override the access rights settings.


Select User Manager from the Server Administration dialog, notice that the server configuration comes with some default groups:

  • All Users
  • Administrators
  • System Managers
  • Security Administrators

The default user named Administrator belongs to both the Administrators and the Security Administrators groups. By default, the Administrators group has all group privileges. Also by default, other groups have none of these privileges.


All members of a group have the same privileges on every project managed by this server configuration.

The privileges apply to all levels equally: projects, views, folders, and items within folders. If users belong to more than one group, they have the maximum amount of privileges, regardless of which group provides them with those privileges.

 

This privilege...

Allows a group to...

See object and its properties

See all projects, views, folders, items, and their properties. This privilege overrides the similarly named access right found in the Generic Object Rights in the Access Rights dialogs.

Modify object properties

Modify the properties of any projects, views, folders, or items. This privilege overrides the similarly named access right found in the Generic Object Rights in the Access Rights dialogs.

Delete object

Delete any projects, views, folders, or items. This privilege overrides the similarly named access right found in the Generic Object Rights in the Access Rights dialogs.

Purge object (delete permanently)

This privilege is not supported at this time.

Change object access right

Change access rights for any projects, views, folders, or items. This privilege overrides the similarly named access right found in the Generic Object Rights in the Access Rights dialogs.

Create object and place it in a container

Create new objects and put them in containers. When this privilege is set, the group can add new views to a project, new folders to a view, and new folders and items to a folder. This privilege overrides the similarly named access right found in the Generic Object Rights in the Access Rights dialogs. It does not override the server-level access right that allows users to create projects.

Grant all specific class-level rights for all classes of objects

Perform any operation not covered by the preceding privileges. For example, this privilege allows group members to check out files, break locks, perform linking operations, and perform labelling operations. This privilege overrides some of the access rights found in the Generic Object Container Rights and all of the access rights in the <item>-specific Rights in the Access Rights dialog.

Server Access Rights

The server-level rights you assign to users and groups authorize them to perform specific operations in a particular server configuration. One of the options determines who can and who cannot create projects when the server configuration is running. Server rights can be assigned only when a server is running.

By default, the Administrators group is assigned all project and Server rights. By default, the All Users group has the rights to create projects and review the server configuration and the server log. The Server access rights are briefly described in the following table.

This access right...

Allows a user or group to...

View server log

Review, but not change, server log information.

View statistics and licensing information

Review, but not change, statistics information (StarTeam Server 5.4 and earlier). Create license usage files.

View server configuration

Review, but not change, the server configuration options.

Modify server configuration

Change the server configuration options.

Remotely administer server

Lock/unlock the server; restart the server from the client; shut down the server from the client; access the Start/Stop Conversion and Hive Manager vault buttons.

Administer user accounts

Add groups and users.

View system policy

Review, but not change, the password and logon failure options for the server configuration.

Modify system policy

Change the password and logon failure options for the server configuration.

Change server security settings

Set Server access rights. If you change this setting, be sure that you remain one of the users who can change access rights.

View security log

Review, but not change, server log information.

StarDisk Operations

 

Create new users

Add new users to sample project.

Replication Support

 

Change user/operation time

Manipulate creation times and user names when using special clients, such as Notification Agent.

Project Operations

 

Create projects

Create projects when the Server is running the server configuration.

Customizations

 

Add/modify database schema

Create customized fields as item properties, or modify a field for an item that can be modified.

Component operations

 

Administer component-level access rights

Designate the users and groups who can create and apply filters and queries for a specific component in the server configuration.

 

Project Access Rights

The following table describes the generic object rights for a project.

To display the Project Access Rights dialog, select the Project > Access Rights command. The right to create a project is set as a Server access right.

This access right…

Allows a user or group to...

See object and its properties

See this project and view its properties by selecting Project > Properties.

Modify properties

Change the properties for this project. The project properties that can be modified are name, description, keyword expansions settings, alternate property editor (APE) settings, process rules settings, requiring unlocked files to be read-only, and several settings that affect users (for example, requiring revision comments to be entered when a file is checked in).

Delete object

Delete this project from its server configuration.

Change object access rights

Change the access rights for this project. If you change this setting, be sure that you remain one of the users who can change access rights.

 

View Access Rights

When you select the View | Access Rights command to open the View Access Rights dialog, the rights shown are for the current view. The rights available from the View node are also available from the View node in the Project Access Rights dialog. In the latter case, the rights cover all views in the project rather than an individual view. It also includes a container-level right that allows users or groups to create views for the project. This right is not available on the View node of the View Access Rights dialog box.

The following table describes the access rights that are available from the View node in the Project

Access Rights dialog box. Most of these access rights also appear on the View node of the View Access Rights dialog box, but apply only to the current view.

This access right...

Allows a user or group to...

Generic Object Rights

 

See object and its properties

Change view properties. View properties that can be modified are the view’s name, description, working folder (also the root folder’s working folder), branch setting for shared items, and file status repository setting.

Modify properties

Modifies the view properties.

Delete object

Deletes the object from the view.

Change object access rights

Changes the access rights of the selected object in the view.

View-Specific Rights

 

Create view labels

Creates view labels. These labels will be automatically attached to the folders and items in the view. Users with this right but not the right to attach labels can still create labels.

Modify view labels

Changes the properties of view labels. For example, this right allows a user to freeze labels so that they cannot be adjusted

Delete view labels

Deletes view labels. This action automatically detaches the view labels from the folders and items that had the labels. Users with this right but not the right to detach view labels can still delete view labels.

Create revision labels

Creates revision labels. Users with this right but not the right to attach labels can still create labels.

Modify revision labels

Changes the properties of revision labels. For example, this right allows a user to freeze labels so that they cannot be adjusted.

Delete revision labels

Deletes revision labels. This action automatically detaches the labels from the folders and items that had those labels. Users with this right but not the right to detach revision labels can still delete revision labels.

Define promotion model

Creates, deletes, and reorders promotion states and edit their properties. After creating a promotion state, you must exit and re-enter the Promotion dialog if you want to set access rights for the newly created state.

Create views

Creates views in the current project. This container-level right is available only when you select the View node from the Project Access Rights dialog.

Override default types

Allows users to override the default set of types included when a new view is created.

 

Folder Access Rights

When you select the Folder > Advanced > Access Rights command to display the Folder Access Rights dialog, you see two folder nodes. The rights available from This Folder node apply to the selected folder only. The rights available from the Child Folders node apply to all the child folders of the selected folder.

The dialog and following table refer to the current folder. The table describes the access rights that are available from the This Folder node in the Folder Access Rights dialog.

Note: Because This Folder has no Generic Item Container subcategory for access rights, container rights for This Folder are on its Child Folders node. If This Folder is the root folder, these rights are set on the Child Folders node of the View Access Rights dialog.

This access right...

Allows a user or group to...

Generic Object Rights

 

See item and its properties

View this folder’s Name, Exclude, and Files tabs, which become available when Folder > Properties is selected. The History tab is controlled by the “See folder history” access right. The Link tab is controlled by the “See folder links” access right.

Modify properties

Change folder properties on the folder Name and Exclude tabs. Properties include folder name, description, use of inherited and local exclude lists, and contents of the local exclude list. If the folder is not a root folder, the working folder and alternate working folder settings are also properties. For root folders, the working folders are view properties and not controlled by this access right.

Delete from folder

Delete this folder from its parent folder. Be aware that if you can delete any of this folder’s parent folders, you can still delete this folder.

Change item access rights

Change the access rights for this folder. If you change this setting, be sure that you remain one of the users who can change access rights.

See history

See this folder’s History tab, which is available when Folder > Properties is selected.

Perform maintenance

Change the revision comments for past revisions.

Set exclusive locks

Lock folders exclusively.

Break exclusive locks

Remove someone else’s exclusive lock on the folders.

Label Rights

 

Attach/Adjust view labels

Add a view label to this folder. Move a view label from one revision of this folder to another. This right controls direct manipulation of labels for this folder at the folder level. It does not stop users from attaching a view label to this folder when a view label is created.

Detach view labels

Remove a view label from this folder. Be aware that if users can delete view labels, they can detach a view label from this folder by deleting the view label from the view, regardless of the setting for this right.

Attach/Adjust revision labels

Add a revision label to this folder. Move a revision label from one revision of this folder to another. This right controls direct manipulation of revision labels for this folder at the folder level.

Detach revision labels

Remove a revision label from this folder. Be aware that if users can delete revision labels, they can detach a revision label from this folder by deleting the revision label from the view, regardless of the setting for this right.

Link Rights

 

See links

See the links involving this folder.

Create links

Link this folder to other folders and items.

Modify links

Change a link for this folder.

Delete links

Delete a link for this folder.


Child Folder Access Rights

When you select the Child Folders node from the Folder Access Rights dialog box, the available rights apply to the child folders of the selected folder. The Child Folders node is also available from the View Access Rights dialog box and the Project Access Rights dialog box. In these cases, the rights apply to all child folders in the current view or all the child folders in the project, respectively.

Below is a description of the access rights available from the Child Folders nodes in the Project Access Rights, View Access Rights, or Folder Access Rights dialog boxes.

 

This access right...

Allows a user or group to...

Generic Item Rights

 

See item and its properties

See the selected folder’s child folders or the selected project’s or view’s folders in the folder hierarchy in the left pane on the screen. You can also view the Name and Exclude Properties dialogs, which open when Folder > Properties is selected. The History tab is controlled by the “See history” access right.

Modify properties

Change folder properties on the Name and Exclude tabs for child folders. The properties include the folder’s name, description, use of inherited and local exclude lists, and the contents of the local exclude list. If a child folder is not a root folder, the working folder and alternate working folder settings are folder properties. If it is the root folder, the working folders are view properties and not controlled by this access right.

Delete from folder

Delete the selected folder’s child folders or the selected project’s or view’s folders from their parent folders. Be aware that if you can delete any of this folder’s parent folders, you can still delete this folder.

Change item access rights

Change the access rights for the selected folder’s child folders or the selected project’s or view’s folders. If you change this setting, be sure that you remain one of the users who can change access rights.

See history

See the History tab, which is available when Folder > Properties is selected.

This action applies to the selected folder’s child folders or the selected project’s or view’s folders.

Perform maintenance

Change the revision comments for past revisions.

Set exclusive locks

Lock child folders exclusively.

Break exclusive locks

Remove someone else’s exclusive lock on the child folders.

Label Rights

 

Attach/Adjust view labels

Add a view label to the selected folder’s child folders or the selected project‘s or view’s folders. Move a view label from one revision of a child folder to another. This right controls direct manipulation of view labels for child folders at the folder level. It does not stop users from attaching a view label to child folders when a view label is created.

Detach view labels

Remove a view label from the selected folder’s child folders or the selected project’s or view’s folders. Be aware that if users can delete view labels, they can detach a view label from child folders by deleting the view label from the view, regardless of the setting of this right.

Attach/Adjust revision labels

Add a revision label to the selected folder’s child folders or the selected project’s or view’s folders. Move a revision label from one revision of a child folder to another. This right controls direct manipulation of revision labels for child folders at the folder level.

Detach revision labels

Remove a revision label from the selected folder’s child folders or the selected project’s or view’s folders. Be aware that if users can delete revision labels, they can detach a revision label from this folder by deleting the revision label from the view, regardless of the setting of this right.

Link Rights

 

See links

See the links involving the selected folder’s child folders or the selected project’s or view’s folders.

Create links

Link the selected folder’s child folders or the selected project’s or view’s folders to other folders and items.

Modify links

Change a link for the selected folder’s child folders or the selected project‘s or view’s folders.

Delete links

Delete a link for the selected folder’s child folders or the selected project’s or view’s folders.

Generic Item Container Rights

 

Create and place in folder

Create a folder in a parent folder, view, or project in which the Child Folder Access Rights dialog box has this option.

Share/Move out of folder

Share or move a folder in a parent folder, view, or project if its Child Folder Access Rights dialog has this option. Be aware that the access rights set for that folder and its contents, along with any rights set for specific child folders and items within that branch of the folder hierarchy, accompany the folder into the new folder.

Change behaviour or configuration

Change the branching ability and configuration of folders that reside in a parent folder, view, or project if its Child Folder Access Rights dialog box has this option.

 

File Access Rights

When you open the File Access Rights dialog box and select the File node, the rights apply only to the selected file.

File access rights are also available from the Folder Access Rights, View Access Rights, and Project Access Rights dialog boxes. In these cases, the rights cover all files in the selected folder, view, or project rather than an individual file. Only in these cases are the following container-level access rights available:

  • Add files to a folder
  • Share/move file out of a folder
  • Change file behaviour/configuration

The following table describes the access rights that are available from the File nodes in the Project

Access Rights, View Access Rights, Folder Access Rights, and File Access Rights dialog boxes. 

This access right...

Allows a user or group to...

Generic Item Rights

 

See item and its properties

See files in the files list (upper pane) and view file properties by selecting File > Properties.

Modify properties

Change the file properties. Modifiable properties include the archive/file name, description, executable bit setting (useful only for non- Windows platforms), compression, storage options, and custom properties. If used, an alternate property editor (APE) may restrict the properties that can be modified and the users who can modify them still further.

Delete from folder

Delete files from their folders.

Change item access rights

Change access rights for the files. If you change this setting, be sure that you remain one of the users who can change access rights.

See history

See file history in the history pane.

Perform maintenance

Change the revision comments for past revisions.

Set exclusive locks

Lock files exclusively.

Break exclusive locks

Remove someone else’s exclusive lock on the files.

Label Rights

 

Attach/Adjust view labels

Add a view label to the files. Move a view label from one revision to another. This right controls direct manipulation of view labels for the files at the item level. This right does not stop users from attaching a view label to the files when a view label is created.

Detach view label

Remove a view label from the files. Be aware that if users can delete view labels, they can detach a view label from the files by deleting the view label from the view, regardless of the setting of this right.

Attach/Adjust revision labels

Add a revision label to the files. Move a revision label from one revision to another. This right controls direct manipulation of revision labels for the files at the item level. It can stop users from checking in files with an attached revision label.

Detach revision labels

Remove a revision label from the files. Be aware that if users can delete revision labels, they can detach a revision label from the files by deleting the revision label from the view, regardless of the setting of this right.

Link Rights

 

See links

See the links created for the files.

Create links

Link the files to other items.

Modify links

Change a link to the files.

Delete link

Delete a link that affects the files.

File-Specific Rights

 

Check in file

Check in files.

Check out file

Check out files.

Generic Item Container Rights

 

Add file to folder

Add files to a folder, view, or project if its File Access Rights dialog box has this option. This right appears only on the File Access Rights dialog boxes associated with a folder, view, or project.

Share/Move out of folder

Share files or move files that reside in a folder, view, or project if its File Access Rights dialog box has this option. This right appears only on the File Access Rights dialog boxes associated with a folder, view, or project. Be aware that the access rights set for any file that is moved or shared go with that file into the new folder.

Change behaviour or configuration

Change the branching ability and configuration of files that reside in a folder, view, or project if its File Access Rights dialog box has this option. This right appears only on the File Access Rights dialog boxes associated with a folder, view, or project.

 

Generic Item Access Rights

The following table describes the access rights that are available from the File nodes in the Project

Access Rights, View Access Rights, Folder Access Rights, and File Access Rights dialog boxes.

This access right...

Allows a user or group to...

See item and its properties

See files in the files list (upper pane) and view file properties by selecting File > Properties.

Modify properties

Change the file properties. Modifiable properties include the archive/file name, description, executable bit setting (useful only for non- Windows platforms), compression, storage options, and custom properties. If used, an alternate property editor (APE) may restrict the properties that can be modified and the users who can modify them still further.

Delete from folder

Delete items from their folders.

Change item access rights

Change access rights for the items. If you change this setting, be sure that you remain one of the users who can change access rights.

See history

See file history in the history pane.

Perform maintenance

Change the revision comments for past revisions.

Set exclusive locks

Lock files exclusively.

Break exclusive locks

Remove someone else’s exclusive lock on the files.

 

Promotion State Access Rights

Each view has its own set of promotion states. Access to these states is controlled by the “Define promotion model” right, which is available from the View node of the Access Rights dialog at the view and project levels. A user with the Define promotion level right can do anything to the promotion model, for example create and delete states, edit their properties, promote a label from one state to another.

(Promotion is a subset of editing properties. Anyone who can edit the properties of a state can also promote that state.) and reorder the states within the view.

Access rights that govern access to individual promotion states. These Generic object rights and

Promotion state specific rights are available from the Promotion State node of the Access Rights dialog at the view and project levels. They also appear on the access rights for individual promotion states. The rights for an individual promotion state are checked at the state level; if necessary, the checking continues at the view level and eventually the project level. If a user is granted a given right at one level, there is no need to check the next.

When a right is granted at the view level, it applies to all states in the view, unless access is denied at the state level. When a right is granted at the project level, it applies to all the states in all the views within the project, unless access is denied at the state or view levels. 

This access right...

Allows a user or group to...

Change object access rights

Change the access rights for an individual promotion state. If you change this setting, be sure that you remain one of the users who can change access rights.

This right is a generic object right. After creating a promotion state, you must exit and re-enter the Promotion dialog if you want to set access rights for the newly created state.

Modify label assignment

Change the label assigned to an individual state either by clicking the Promote button or editing the label property. No other properties for the state can be edited unless the user also has the Define promotion model access right from the View node. This right is a promotion state specific right.

Component Access Rights

If you have the server-level access right to “Administer component-level access rights”, you can set component-level access rights from any open component. 

This access right...

Allows a user or group to...

Create public filters

Create public filter for this component.

Create public queries

Create public queries for this component.

 Component-level Filter Access Rights

The following describes the Filter Access Rights at the Component Level:

This access right...

Allows a user or group to...

See object and its properties

See public filters for this component in the filters list (on the toolbar) and view their properties in the Filters dialog.

Modify properties

Change public filter properties for this component. The properties that can be modified for a filter are its list of displayed fields, its sorting and grouping rules, the query associated with it, and its context (the items of the component to which it can be applied).

Delete object

Delete public filters for this component from its list of filters.

Change object access rights

Change access rights for public filters for this component.

Individual Filter Access Rights

The individual filter access rights are described below: 

This access right...

Allows a user or group to...

See object and its properties

See the filter in the filters list (on the toolbar) and view its properties in the Filters dialog box.

Modify properties

Change the properties for the filter. The properties that can be modified for the filter are its list of displayed fields, its sorting and grouping rules, the query associated with it, and its context (the items of the component to which it can be applied).

Delete object

Delete the filter from the list of filters.

Change object access rights

Change the access rights for the filter.

Component-level Query Access Rights

The following table describes the Query Access Rights at the Component Level: 

This access right...

Allows a user or group to...

See object and its properties

See public queries in the Queries dialog and view their properties in the Edit Query dialog.

Modify properties

Change public queries properties for this component. The properties that can be modified are the query’s name and its conditions.

Delete object

Delete public queries for this component from its list of queries.

Change object access rights

Change the access rights for public queries for this component.

Individual Query Access Rights

The following table describes the Individual Query Access Rights: 

This access right...

Allows a user or group to...

See object and its properties

See this query in the Queries dialog box and view its properties in the Edit Query dialog box.

Modify properties

Change the properties for this query. The properties that can be modified are its name and conditions

Delete object

Delete this query from the list of queries.

Change object access rights

Change the access rights for this query.

 Change Package Access Rights

Change Package item access rights available from the Project and View menu Access Rights menu item.

This access right...

Allows a user or group to...

Generic Change Package Rights

 

Create change package

Allows the specified users and groups to create a change package using a View Compare/Merge session.

See change package and its properties

Allows the specified users and groups to view the change package and its properties.

Modify properties

Allows the specified users and groups to modify the change package properties for an uncommitted change package. From the Change Perspective, viewing the selected change package properties is read-only. However, if you select the change package and choose Change Package > Open (in VCM), the change package opens in the VCM session where you can modify its properties.

Delete from view

Allows the specified users and groups to delete a change package from the view.

This is an irreversible action.

Change access rights

Allows the specified users and groups to change the access rights for a change package. If you change this setting, be sure that you remain one of the users who can change access rights.

See history

Allows the specified users and groups to see change package history in the History pane.

Set exclusive locks

Allows the specified users and groups to lock change packages exclusively.

Break exclusive locks

Allows the specified users and groups to remove someone else’s exclusive lock on change packages.

Label Rights

 

Attach/Adjust view labels

Allows the specified users and groups to add a view label to a change package, and move a view label from one revision to another. This right controls direct manipulation of view labels for the change package at the item level. This right does not stop users from attaching a view label to the change package when a view label is created.

Detach view label

Allows the specified users and groups to remove a view label from the change package.

Be aware that if users can delete view labels, they can detach a view label from the change package by deleting the view label from the view, regardless of the setting of this right.

Attach/Adjust revision labels

Allows the specified users and groups to add a revision label to a change package and move a revision label from one revision to another. This right controls direct manipulation of revision labels for the change packages at the item level. It can stop users from committing change packages with an attached revision label.

Detach revision labels

Allows the specified users and groups to remove a revision label from a change package. Be aware that if users can delete revision labels, they can detach a revision label from the change package by deleting the revision label from the view, regardless of the setting of this right.

Link Rights

 

See links

Allows the specified users and groups to view the Change Packages in the Change Package Perspective Replay Pane.

Create links

Allows the specified users and groups to commit a VCM Session.

Modify links

Allows the specified users and groups to modify a link.

Delete links

Allows the specified users and groups to delete a link.

 External Link Access Rights

External Link item access rights available from the Project and View menu Access Rights menu item.

This access right...

Allows a user or group to...

Create external link

Allows the specified users and groups to create an external link between items in two different views, or on two different servers.

See external link and its properties

Allows the specified users and groups to view the external link and its properties.

Modify properties

Allows the specified users and groups to modify the external link properties. To view the properties of an external link, open both views which contain the link. In one of the views. Click on the Link tab, then right-click the external link and choose Link Properties. You can only modify the description property.

Delete from view

Allows the specified users and groups to delete an external link from the view.

This is an irreversible action.

 

Comment List
Related
Recommended