Hi Edgar, I have tried your solution, and have spent many hours at a multitude of security string and user combinations. Much to my chagrin I have had no luck at all. Either I get a situation where the collection I wish to use to delete from Disappears from view. Or, all views in the Collections and Universe have the delete capability. If you have actually done this yourself, could you please provide a step by step in the process you used. Maybe I am having a step sequence problem. Though I am pretty sure I have tried every angle. Anyone else have any suggestions?
Thanks Patrick ________________________________ From: edgar parra [mailto:[email protected]] Sent: Saturday, July 18, 2009 11:18 AM To: spectrum Cc: spectrum Subject: Re: [spectrum] Security Communities on Collections Hi Patrick, Actually, you can achieve the scenario you are telling me, but with some tweaking of the view permissions, take for instance this scenario: A user with special permissions to delete only certain GCs, then you do the following: - Restrict this user or group to the view "Universe" with RO permissions and a security string with low privileges (because you have to provide access to this view at least, otherwise, the special user will not be able to see anything) - Assign RW permissions and the "delete" security string to this user(he or she will then have 2 security strings), only for the GC you want him to delete or manipulate. In this way, you will achieve the following: The user or users within the group will be able to see the Universe view, with only RO permissions and when accessing the GC they are entitled to delete or manipulate; this will be available to them through the GC view (and only this GC not the other ones you have, unless the user or group has another security string for other GCs) Hope it helps! Happy weekend to all Eng. Edgar Parra MCSE, MCSA, MCP, CA's Spectrum Solutions Engineer On Fri, Jul 17, 2009 at 5:23 PM, Murtey, Patrick <[email protected]> wrote: Hi Edgar, Thanks for the quick response. So if I understand you right, then it has to be a specialized account which only has one view assigned to it, and that's the one into the specific Collection. There is no way to have a regular account that views all Explorer views, with delete capability on just one Collection? Patrick ________________________________ From: edgar parra [mailto:[email protected]] Sent: Friday, July 17, 2009 2:43 PM To: spectrum Cc: spectrum Subject: Re: [spectrum] Security Communities on Collections Dear Patrick & List: When you assign a Security String to a GC, this means it becomes visible only to those users that have this security string, this does not mean that they are entitled to delete models in the GC. This is the reason why, when you log to Spectrum with a different user (who doesn't have the security string "delete" in his group or profile) you are not are to see the GC. In order to achieve what you need, you have to do the following: 1) Assign the "delete" security string to one of your users or to a particular group 2) Assign the role with sufficient privileges to delete models or GCs from Spectrum (Admin RW) 3) log on with this user, and you will be able to see only the GC you are entitled to, and to delete them if required. Regards, hope it helps. Eng. Edgar Parra MCSE, MCSA, MCP, CA's Spectrum Solutions Engineer On Fri, Jul 17, 2009 at 1:05 PM, Murtey, Patrick <[email protected]> wrote: Hi All, Can anyone tell me if it is possible to apply user permissions (security strings) to a specific Collection, so that only devices that appear in that collection are accessible to be destroyed by only a certain user group? a) In the user group I wanted to give this privilege, I created an Access Security community of "Delete" with a role of AdministratorRW, then restricted the privilege to just "Model Management" , "Destroy Models" for this security string. b) Then I included it with the already existing OperatorRW security string already that existed previously for that group. c) Then I went to the Collection that I wanted to give this privilege to, and selected "Edit Collection", and in the Security String box I placed the "Delete" security string I had just created. d) However, When I log into Oneclick as a user of that group with the "Delete" privilege, the collection is missing. e) If I log off and remove the "Delete" security string from the Collection, and log back in as a user of the same group then the Collection has returned. Is it possible to accomplish what I am trying to do? If so, can someone illuminate me on where I am going wrong? Thanks In Advance Patrick Murtey Network and Systems Management Manager MGM MIRAGE Information Technology [email protected] <mailto:[email protected]> * --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] -- * --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] -- Eng. Edgar Parra MCSE, MCSA, MCP, CA's Spectrum Solutions Engineer * --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
