Hi Edgar,
Thanks for the quick response. So if I understand you right, then it has to be a specialized account which only has one view assigned to it, and that's the one into the specific Collection. There is no way to have a regular account that views all Explorer views, with delete capability on just one Collection? Patrick ________________________________ From: edgar parra [mailto:[email protected]] Sent: Friday, July 17, 2009 2:43 PM To: spectrum Cc: spectrum Subject: Re: [spectrum] Security Communities on Collections Dear Patrick & List: When you assign a Security String to a GC, this means it becomes visible only to those users that have this security string, this does not mean that they are entitled to delete models in the GC. This is the reason why, when you log to Spectrum with a different user (who doesn't have the security string "delete" in his group or profile) you are not are to see the GC. In order to achieve what you need, you have to do the following: 1) Assign the "delete" security string to one of your users or to a particular group 2) Assign the role with sufficient privileges to delete models or GCs from Spectrum (Admin RW) 3) log on with this user, and you will be able to see only the GC you are entitled to, and to delete them if required. Regards, hope it helps. Eng. Edgar Parra MCSE, MCSA, MCP, CA's Spectrum Solutions Engineer On Fri, Jul 17, 2009 at 1:05 PM, Murtey, Patrick <[email protected]> wrote: Hi All, Can anyone tell me if it is possible to apply user permissions (security strings) to a specific Collection, so that only devices that appear in that collection are accessible to be destroyed by only a certain user group? a) In the user group I wanted to give this privilege, I created an Access Security community of "Delete" with a role of AdministratorRW, then restricted the privilege to just "Model Management" , "Destroy Models" for this security string. b) Then I included it with the already existing OperatorRW security string already that existed previously for that group. c) Then I went to the Collection that I wanted to give this privilege to, and selected "Edit Collection", and in the Security String box I placed the "Delete" security string I had just created. d) However, When I log into Oneclick as a user of that group with the "Delete" privilege, the collection is missing. e) If I log off and remove the "Delete" security string from the Collection, and log back in as a user of the same group then the Collection has returned. Is it possible to accomplish what I am trying to do? If so, can someone illuminate me on where I am going wrong? Thanks In Advance Patrick Murtey Network and Systems Management Manager MGM MIRAGE Information Technology [email protected] <mailto:[email protected]> * --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] -- * --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
