Figure: Access Control Editor
The Access Control Editor provides the option to control user access, e.g. for reading or modifying folders and documents and to give permission on access control settings on these. Please note that document permissions on folders are working recursively, thus if read access to a folder is not permitted, none of the documents in this folder or sub-folders can be read.
The editor contains the following two tables:
Figure: Access Control Editor
To make security work with Jackrabbit, perform the following steps:
Figure: Replaced security files in RAD.
Please note that implicit policies are only set on folder creation with the security enabled. In case you set the security after a folder is already created from a non security enabled repository access, the policy is not retroactively set. A user without administrator role does not have access to this folder. In this case a user with administrator role has to set policies on the folder manually. For example to make it possible to upload documents, policies on the folder /process-instances have to be set manually if it was created before the security setting.
For the following folder pattern, the permission ALL is set on creation for everyone in case security is enabled:
The table with inherited permissions lists the permissions inherited from parent folders. These entries are not editable.
The following columns are listed for inherited permissions on folders:
Figure: Inherited Permissions for a folder.
The following columns are listed for inherited permissions on documents:
Figure: Inherited Permissions for a document.
You have the option to select the columns to be displayed in
the table and reorder them. Click the Select Columns
icon 
to open
the Select Columns dialog, which is described
in detail in the section Column Selection and Reordering
of the chapter Stardust Portal Components.
The table may be sorted by all columns by
clicking the sort icon
. The table data can be toggled
between ascending and descending order when the sort icon is clicked.
Please refer to the section Sorting of the chapter Stardust Portal Components for detailed information.
Depending on whether the Access Control Editor was opened for a folder or for a document, one of the following tables are available:
The following operations on permissions are provided:
Granted permissions on folders have a table with the following columns:
Figure: Granted Permissions on a Folder
You have the option to select the columns to be displayed in
the table and reorder them. Click the Select Columns
icon to open
the Select Columns dialog, which is described
in detail in the section Column Selection and Reordering
of the chapter Stardust Portal Components.
The table may be sorted by all columns by
clicking the sort icon
. The table data can be toggled
between ascending and descending order when the sort icon is clicked.
Please refer to the section Sorting of the chapter Stardust Portal Components for detailed information.
Granted permissions on documents have a table with the following columns:
Figure: Granted Permissions on a Document
You have the option to select the columns to be displayed in
the table and reorder them. Click the Select Columns
icon to open
the Select Columns dialog, which is described
in detail in the section Column Selection and Reordering
of the chapter Stardust Portal Components.
The table may be sorted by all columns by
clicking the sort icon
. The table data can be toggled
between ascending and descending order when the sort icon is clicked.
Please refer to the section Sorting of the chapter Stardust Portal Components for detailed information.
To add a participant to change the permission of, click the Add Participant icon:
Figure: Add Participant
The Select Participant dialog opens, where you can select the participant in a list. The allowed participants are role, organization, department and its sub-organization and children.
Figure: Select a Participant
OR
Click the link Pick from Tree. The participant tree gets displayed. Select the participant from the tree.
Figure: Participant Tree
Note that the access can be granted to a role but when the role is scoped, the accessing user's scope that is department is also displayed. So, if a user would not be allowed to see or work with a process instance due to department association then similarly, the access to the process attachment is denied to that user.
To remove selected participant(s) from the permissions table, you can either:
Figure: Removing a Participant from the List.
Figure: Removing a Participant via Remove action.
Selecting one or more participant(s) in the table is done by clicking directly on the according row(s). For details on selecting rows in tables, refer to section Table Row Selection of chapter Stardust Portal Components. Note that administrators cannot be removed and will remain even in case all rows are selected.
To edit selected permission(s) you can do one of the following:
Figure: Edit a Permission
Figure: Editing all selected Permissions
Selecting one or more participant(s) in the table is done by clicking directly on the according row(s). For details on selecting rows in tables, refer to section Table Row Selection of chapter Stardust Portal Components.
Now the permission for the participant(s) can be edited.
Figure: Permissions can be edited now.
You can switch the granted permissions in the columns between the following values provided in the drop-down list:
Figure: Set the Permission.
Click Apply to apply your changes.