Clear Choice Technical Services of San Francisco

Contact Us Now
(415) 423-0663 Live Chat Software

Tech Tip: Enhancing Security by Dividing Administrative Privileges

October 25, 2013 By Admin

Written by User Education

Published: October 25, 2013

1424 Views

In Laserfiche, privileges are a set of permissions that secure elements of your repository beyond the basic functions of feature rights or the object-specific functions of access rights.  While some of these privileges may be appropriate for regular users, many are specifically administrative.  For example, the Manage Entry Access privilege allows a user to see (although not open) every entry in the repository, and set access right security for those entries, and the Manage Tags privilege allows the user to set, unset, and grant all the tags in the repository.  Because these rights are powerful, if your repository uses security to restrict access to the repository, it’s a good idea to only grant those privileges to trusted administrative users.

If you have a secure repository, particularly one with a restrictive security policy, you may want to be particularly careful about granting certain privileges.  Certain privileges or combinations or privileges can be particular powerful.

Separating Trustee Privileges

One pair of privileges that is particularly powerful in conjunction with one another is Manage Trustees and Set Trustee Privileges.  The former, Manage Trustees, allows the user to create new users and set user passwords.  The latter, Set Trustee Privileges, allows the user to grant rights to a particular user.

This means that a user with both privileges can create a new user, set the password for that user, grant them all the rights in the repository, and then log in as them.  Essentially, setting both rights on a user allows that user to do anything in the repository.  For a small site with only one or two administrators, or a site without a restrictive security policy, this may be acceptable.  However, for larger sites, or sites with restrictive security policies, you may want to avoid this situation.

To avoid granting a user all rights in the repository, simply make sure that no single user has both Manage Trustees and Set Trustee Privileges.  By splitting this right between multiple users, you can ensure that there are checks and balances on your security policy.

Granting Rights to Individual Templates and Fields

In many cases, you may want or need to have non-administrative users manage certain templates and fields.  For instance, you might want the Accounting manager to be able to make changes to the Accounting template and the fields in that template, since he or she knows more about the template and fields than the general repository administrators.

Your first instinct may be to grant the Accounting manager the Manage Templates and Fields privilege.  This privilege would allow the Accounting manager to manage the Accounting template and its fields… but it would also allow him or her to manage all the templates and fields for other departments as well.

Instead, you can use template and field access rights to grant the Accounting manager the right to handle the Accounting department’s templates and fields. This allows you to grant the general Manage Templates and Fields privilege only to administrators who should be able to handle all the repository’s templates and fields. (For specific instructions on template and field access rights, see the Laserfiche Administration Console help files, in the “Security” chapter.)

Managing Entry Access Rights

The Manage Entry Access Rights privilege is a very powerful privilege: it allows the user to brows e any entry in the repository, it allows the user to manage documents in the recycle bin, and it allows the user to set entry access rights for every entry in the repository.  While this is an appropriate right for high-level administrators who are in charge of managing security for the entire repository, it is not appropriate for many other users, even power users.

However, you may want to allow power users to manage entry access security for certain folders.  For example, you may want the Sales manager to be able to set entry access rights for documents in the Sales folder—without giving him or her access to documents in other departments’ folders.

It was for this situation that the Write Entry Security entry access right was created.  Write Entry Security allows a user to manage entry access rights, but only for the entries on which they have been granted that right.  This means that you can grant Write Entry Security to your Sales manager on the Sales folder, with the scope This entry, subfolders and documents, and thus allow the manager to configure security for his or her folder and subfolders, but not for other folders in the repository.

**Learn more about security best practices in IG201: Best Practices in Laserfiche Security at Empower 2014.**

Register for Empower 2014 - The Annual Laserfiche Conference

Filed Under: Uncategorized

Want Us to Contact You with a Quote

FAST - EASY - FREE "1min Fill in Below"

Don’t Miss Our Latest Promos. Subscribe Our Newsletter Now!

Newsletter

San Francisco, CA 94104

(415) 423-0663


Affordable Copiers – Service Area we Cover

Los Angeles, San Diego, San Jose, East San Gabriel Valley, San Francisco, Fresno, Sacramento, Long Beach, Oakland, Bakersfield , Anaheim, Santa Ana, Riverside, Stockton, Chula Vista, Irvine, Fremont, San Bernardino, Modesto, Oxnard, Fontana, Moreno Valley, Huntington Beach, Glendale, Santa Clarita, Garden Grove, Oceanside, Rancho Cucamonga, Santa Rosa, Ontario, Elk Grove, Corona, Lancaster, Palmdale, Coachella Valley, Salinas, Hayward, Pomona, Escondido, Sunnyvale, Torrance, Pasadena, Orange, Fullerton, South Bay Cities, Thousand Oaks, Visalia, Roseville, Concord, Simi Valley, Santa Clara, Victorville, Vallejo, Berkeley, El Monte, Downey, Costa Mesa, Carlsbad, Inglewood, Fairfield, Ventura, Temecula, Antioch, Richmond, West Covina, Murrieta, Norwalk, Daly City, Burbank, Santa Maria, El Cajon, San Mateo, Rialto, Clovis, Compton, Vista, Mission Viejo, South Gate, Vacaville, Carson, Santa Monica, San Marcos, Hesperia, Arden-Arcade, Westminster, Redding, Palos Verdes, Santa Barbara, San Leandro, Chico, Loomis Basin-Folsom Lake, Hawthorne, Whittier, Newport Beach, Livermore, Citrus Heights, Tracy, Indio, Alhambra, Chino, Buena Park, Hemet, Redwood City, Merced, Lakewood, Tustin, Lake Forest, Napa, Mountain View, Bellflower, Pleasanton, Alameda, Baldwin Park, Chino Hills, Upland, Folsom, San Ramon, Perris, Milpitas, Union City, Manteca, Apple Valley, Turlock, Redlands, San Gorgonio Pass, Rancho Cordova, Redondo Beach, Pittsburg, Yorba Linda, Walnut Creek, Palo Alto, Camarillo, Davis, Yuba City, Laguna Niguel, San Clemente, Pico Rivera, Lodi, Montebello, Madera, Florence-Graham, Santa Cruz, Encinitas, La Habra, Tulare, Carmichael, Monterey Park, Castro Valley, Cupertino, Gardena, Rocklin, National City, Lake Elsinore, Petaluma, Huntington Park, San Rafael, La Mesa, Arcadia, Woodland, Santee, Brentwood, Fountain Valley, Diamond Bar, Porterville, Hanford, Novato, Rosemead, Dublin, Highland, Colton, Cathedral City, Watsonville, Yucaipa, Delano, Gilroy, Placentia, West Sacramento, Glendora, Palm Desert, Aliso Viejo, Cerritos

Zip codes: 94102, 94103, 94104, 94105, 94107, 94108, 94109, 94110, 94111, 94112, 94114, 94115, 94116, 94117, 94118, 94121, 94122, 94123, 94124, 94127, 94131, 94132, 94133, 94134, 94158.

Get Free VOIP Phone System Quotes! Yes Click Here

We Work On Most Models

Copier Lease San Francisco Supported Brands

Copy Machine Service Location


555 California Street San Francisco, California 94104
Phone Number: (415) 423-0663
 

Business Hours

Mon-Fri: 8:00AM - 5:00PM
Sat-Sun: Closed

Clear Choice Technical Services of San Francisco

  • Copy Machine Maintenance
  • Copier Rentals and Leasing
  • Copier Sales
  • Copier Repair
  • Copier Lease San Francisco
  • Copy Machine Rentals
  • Blog

Copier Lease San Francisco

  • Canon Copiers
  • Copier Lease San Francisco CA
  • CopyStar Copiers
  • Gestetner Copiers
  • Konica Minolta Copiers
  • Kyocera Copiers
  • Kyocera Copiers
  • Lanier Copiers
  • NEC Copiers
  • Océ Copiers
  • Panasonic Copiers
  • Photocopier Machine
  • Canon Photocopiers
  • Copier Machine
  • Copier Machines
  • Multifunction Printers
Copyright © 2022. Copier Lease Specialist. All Rights Reserved.