Concepts

Tasks

Editing Security Profiles Manually

Once you have created a security profile, you can manually add, edit, or delete class, attribute, relationship, action, or view overrides. You might want to do this when you know which items need to be included in a profile, or when you need to fine-tune a profile that was created using Security Setup mode.

To Manually Edit a Security Profile

1.	From the Site window, click on the tool bar. The Enterprise window appears.

2.	Select the Security view and then the Security Profiles tab.

3.	Double-click the security profile that you want to edit. The Security profile window appears.

4.	Make sure that editing is enabled.

5.	To add one or more class overrides to the profile, select the List tab, and click Browse. The Browse Classes to Secure dialog appears.

6.	Select the classes that you need to add to the profile, and then click OK.

The class overrides are added to the profile with a default security level of Editable (Enabled).

Tip: To delete a class security override in an open security profile, right-click the class name and select Delete.

7.	To change the security level for a class, double-click it. The Class Security dialog appears. For example:

8.	Select the class security level:

Setting Name

Description

Security level

Select the default security level for this class: • Editable (Full access): This level allows a user to perform any task on objects of this class, including viewing data, entering new data, and editing existing data. All actions are enabled, and all views and pages are visible. For example, a user whose profile has the purchase order class enabled will be able to create, edit and view purchase orders. • Read-only: This level allows a user to view data, but not to add or modify data on objects of this class. Actions are disabled, but views and pages are visible. For example, a user whose profile has the purchase order class set to read-only will be able to see purchase orders, but will not be able to edit them, or to create new ones. Any actions that relate to purchase orders will be disabled. • Not available (No access): This level means that a user cannot view, add, or modify data on objects of this class. Actions are disabled, and views and pages are hidden. For example, a user whose profile has the purchase order class set to not accessible will not be able to see any purchase orders in any view. Any tables or columns that contain purchase order information will be blank. Any purchase order fields that normally appear on any view will not be shown at all. Further, all menu items that relate to purchase orders will not appear.

9.

If you want, you can override the class security level for individual actions, attributes, relationships, views, and pages contained in the class. To do this, select Override the general security level for specific elements, then click Select Items to Secure. The Select Elements to Secure dialog appears.

10.	Select the items that need a different security level on the appropriate tabs, then click OK.

11.	On the Class Security dialog, review the items on each tab to ensure that each one has the appropriate security level. To change the security level for any item, highlight the item, press F2, and change the setting as appropriate.

Tip: You can delete the override for any item by right-clicking the name of the item and selecting Delete.

12.	When you are finished editing the security settings for the class, click OK.

13.	Repeat steps 7 to 12 for each class security in the profile.

If you want, you can preview your changes to the security profile. See Previewing a Security Profile.