Robert Volke wrote:
I agree. The network security option is one that we are exploring but
there is an issue with using this as the only solution. So far we have
secured network folders set up for each department, as well as private
network space for each employee. From my understanding, the problem is
setting up various folders for the different combinations of user
access. Say user Bob, only wants 5 users to be able to see his
document, and only two of them to be able to edit it. Then lets say one
of these 5 users, lets say Mike, wants to do the same thing with the two
than can edit Bob's document, as well as three other users not able to
access Bob's documents. The number of user combinations needing folders
would increase dramatically as the company gets as large as mine. This
is where the dilemma comes in, and right now the network guys are being
resistant since this change would mean a lot more over head for them.
as has been suggested in this thread, there are several tactics that
could work. setting read only flags or something like that in files
themselves without protecting them in underlying level would be pointless.
what would prevent a user from copying content to a new file and replace
the old one if there are no access controls in place at filesystem level ?
in your case i would suuggest coupling two technologies :
a) signatures in oo.org documents for documents that are kept
exclusively in opendocument and for whom main concern is integrity. to
make sure that everyone can use them, put oo.org on every computer, even
on those where there already is msoffice - there is no financial
expenses, administrative overhead is minimal or nonexistant if your
organization really is big enough to have some centralized management in
place. remember that everyone still can change these files or delete
them, it just will be obvious.
b) file system security. yes, correctly managing this should be a work
for system administrators, you can't trust users to set access policies
correctly unless everybody is extremly tech savvy (there are very few
companies like that, if any).
if it is important, define work amount, put it on paper, find a person
or several who will be responsible for this, add this new responsibility
to their job description and agree on financial compensation (wage ;) )
increase for the new work.
..
--
Rich
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
