Difference between revisions of "Security Matrix"

From SmartWiki
Jump to: navigation, search
(Enabling the Security Matrix)
(One intermediate revision by the same user not shown)
Line 1: Line 1:
==Enabling the Security Matrix==
+
==Overview==
 +
The '''Security Matrix '''feature in your [[SmartSimple]] [[instance]] allows you to restrict [[User|user]]'s interaction with the [[Universal Tracking Application|Universal Tracking Applications]] in your system and the associated [[entities]] with each application. The '''Security Matrix '''allows you to define how users can interact with each level of the data in an application, based on the way that they need to interact with data. You must enable the '''Security Matrix '''and permission each [[User Role|role]] to have varying levels of accessibility to the [[Universal Tracking Application]]. 
  
Once you have created your [[Universal Tracking Application]] you may want to restrict interaction with the [[Applications|application]] and the associated [[Entity|entities]].  In order to do this you will need to enable the '''Security Matrix''' feature.
+
'''Note: '''You must have [[Global User Administrator|System Administrator]] privileges in order to enable the '''Security Matrix.'''
  
You should only enable this feature when you have completed the entire application, as it may become very difficult to work with the application once this security is switched on.
+
==Configuration - Essentials==
 +
===Enabling the Security Matrix===
 +
Your first step is to create the [[Universal Tracking Application|Universal Tracking Applications]] for your system. If and once these have already been created, you may then enable the '''Security Matrix '''feature to ensure that the levels of access dependent on [[User Role|user role]] are properly secure and permissioned. 
  
The '''Security Matrix''' is configured from the '''Configuration''' page.
+
1. Open the {{UTA}} whose security you would like to permission.
  
1. Click the '''Settings''' tab.
+
2. Click the '''gear icon '''on the top left of the UTA page in order to enter its '''Configuration Settings.'''
  
2. Click the [[UTA Settings - Security|Security tab]].
+
:: [[UTA configuration.png]]
 +
3. Click into the '''Security '''tab.
  
The '''Security Matrix''' setting is displayed in the '''Security Settings'''.
+
4. Toggle on the '''Enable Security Matrix '''option. 
  
[[Image:SecurityMatrixSetting.png|link=]]
+
5. A '''Security Matrix '''hyperlink will then appear below. Click this hyperlink.
+
 
3. Click the '''Enable Security Matrix''' check box.
+
:: [[File:UTA security matrix.png|500px|border]] 
 +
<pre> As soon as the Security Matrix is enabled, all users will lose all access to data within the application until the role-specific permissions are established. </pre>
 +
===Setting Role-Based Security Permissions===
 +
The next step after clicking into the '''Security Matrix '''hyperlink is to specifically choose which roles will have which security permissions with the {{UTA}}. 
  
4. Click the '''Save''' button.
 
  
The '''Security Matrix''' link is added to the top of the ''''Security Settings''' window.
 
 
As soon as the security matrix is enabled, all [[User|users]] will lose all access to data within the application until the permissions are established.
 
  
 
5. Choose the [[roles]] that should have access to the application in the [[UTA_Settings_-_Security#Access_Role_Settings|Access Role Settings]] box. Only the roles added to [[UTA_Settings_-_Security#Access_Role_Settings|Access Role Settings]] are made available to be configured in the Security Matrix.
 
5. Choose the [[roles]] that should have access to the application in the [[UTA_Settings_-_Security#Access_Role_Settings|Access Role Settings]] box. Only the roles added to [[UTA_Settings_-_Security#Access_Role_Settings|Access Role Settings]] are made available to be configured in the Security Matrix.
Line 34: Line 37:
  
 
==How the Security Matrix works==
 
==How the Security Matrix works==
 
 
* The current view is for security associated with the Grant level ({{l1}}).
 
* The current view is for security associated with the Grant level ({{l1}}).
  
Line 42: Line 44:
  
 
==Role Engagement==
 
==Role Engagement==
 +
All access is [[Role|role]] based. Each set of access permissions can be set based on the following role engagement:
  
All access is [[Role|role]] based.  Each set of access permissions can be set based on the following role engagement:
 
 
* '''All''' – All [[User|users]] in this [[Role|role]] can perform the permissioned actions.
 
* '''All''' – All [[User|users]] in this [[Role|role]] can perform the permissioned actions.
 
* '''Owner''' – Only a [[User|user]] in this [[Role|role]] associated through the "Owner" standard field can perform the permissioned actions.
 
* '''Owner''' – Only a [[User|user]] in this [[Role|role]] associated through the "Owner" standard field can perform the permissioned actions.
Line 51: Line 53:
  
 
==Permission Types==
 
==Permission Types==
 +
The following six permission types are available:
  
The following six permission types are available:
 
 
* '''Deny''' - Users in this role are denied access to this item.
 
* '''Deny''' - Users in this role are denied access to this item.
 
* '''View''' – View the item.
 
* '''View''' – View the item.
Line 61: Line 63:
  
 
==Setting the Security Matrix==
 
==Setting the Security Matrix==
 
 
1. Set the '''permissions''' as shown below:
 
1. Set the '''permissions''' as shown below:
  
 
[[Image:SecurityMatrixExample.png|link=]]
 
[[Image:SecurityMatrixExample.png|link=]]
+
 
 
* All Employees can view all items.
 
* All Employees can view all items.
 
* Only the Employee assigned as the "Owner" of a given record can view, add, edit, delete and assign other people to that record.
 
* Only the Employee assigned as the "Owner" of a given record can view, add, edit, delete and assign other people to that record.
Line 76: Line 77:
  
 
[[Image:SecurityMatrixL2.png|link=]]
 
[[Image:SecurityMatrixL2.png|link=]]
+
 
 
4. Set the permissions the same as for the Level 1 items.
 
4. Set the permissions the same as for the Level 1 items.
  
Line 84: Line 85:
  
  
{{PrevNextStart}} [[Calculating Information between Levels]]
+
{{PrevNextStart}} [[Calculating Information between Levels]]
{{PrevNextMid}} [[Reader Logs]] {{PrevNextEnd}}
+
{{PrevNextMid}} [[Reader Logs]] {{PrevNextEnd}}
 
[[Category:Universal Tracking Application]][[Category:Security]]
 
[[Category:Universal Tracking Application]][[Category:Security]]

Revision as of 11:55, 11 July 2019

Overview

The Security Matrix feature in your SmartSimple instance allows you to restrict user's interaction with the Universal Tracking Applications in your system and the associated entities with each application. The Security Matrix allows you to define how users can interact with each level of the data in an application, based on the way that they need to interact with data. You must enable the Security Matrix and permission each role to have varying levels of accessibility to the Universal Tracking Application

Note: You must have System Administrator privileges in order to enable the Security Matrix.

Configuration - Essentials

Enabling the Security Matrix

Your first step is to create the Universal Tracking Applications for your system. If and once these have already been created, you may then enable the Security Matrix feature to ensure that the levels of access dependent on user role are properly secure and permissioned. 

1. Open the Universal Tracking Application™ whose security you would like to permission.

2. Click the gear icon on the top left of the UTA page in order to enter its Configuration Settings.

UTA configuration.png

3. Click into the Security tab.

4. Toggle on the Enable Security Matrix option. 

5. A Security Matrix hyperlink will then appear below. Click this hyperlink.

UTA security matrix.png 
 As soon as the Security Matrix is enabled, all users will lose all access to data within the application until the role-specific permissions are established. 

Setting Role-Based Security Permissions

The next step after clicking into the Security Matrix hyperlink is to specifically choose which roles will have which security permissions with the Universal Tracking Application™


5. Choose the roles that should have access to the application in the Access Role Settings box. Only the roles added to Access Role Settings are made available to be configured in the Security Matrix.

6. Click the Save button again.

7. Click the Security Matrix link.

The Security Matrix window is displayed.

SecurityMatrix.png

How the Security Matrix works

  • The current view is for security associated with the Grant level (Level 1).
  • Two additional tabs are used to control security associated with the Activity (Level 2) and Level 3 Activity levels.

For each role that you have permissioned to access the application in the "Access Role Settings," the same set of options will be displayed at each level.

Role Engagement

All access is role based. Each set of access permissions can be set based on the following role engagement:

  • All – All users in this role can perform the permissioned actions.
  • Owner – Only a user in this role associated through the "Owner" standard field can perform the permissioned actions.
  • Assigned – Only users that are assigned to the item - either in the "Assigned" standard field or assigned as a contact with this role - can perform the permissioned actions.
  • Accounts – Only users in this role that are associated with organisations assigned to this item can perform the permissioned actions. This is an indirect permission. For example, if you were to associate a company with a project and use this permission, then someone from that company with this role would be able to perform the permissioned actions.
  • Person - Only users in this role associated through the "Person" standard field can perform the permissioned actions.

Permission Types

The following six permission types are available:

  • Deny - Users in this role are denied access to this item.
  • View – View the item.
  • Add – Create a new item.
  • Edit – Edit an existing item.
  • Delete – Delete an existing item.
  • Assign – Assign other contacts to the item.

Setting the Security Matrix

1. Set the permissions as shown below:

SecurityMatrixExample.png

  • All Employees can view all items.
  • Only the Employee assigned as the "Owner" of a given record can view, add, edit, delete and assign other people to that record.

2. Click the Save button.

3. Click the Activity Access tab.

The same set of roles and permissions are displayed, but this time for the Level 2 items.

SecurityMatrixL2.png

4. Set the permissions the same as for the Level 1 items.

5. Click the Save button.

6. Repeat this process for Level 3 Activities.





Previous.png Calculating Information between Levels Reader Logs Next.png