Definition of users and access rights

The term "definition of access rights" means definition of accesses of individual users to objects and applications in the system. 

Terminology

User's access to individual objects of D2000 system is defined by means of the assignment of defined groups to particular user.

Seeing that, one object may be occurred in several groups of objects, a situation when two or more groups of objects that contain the same objects will be assigned to user can occur. In that case, the access right with the highest priority is applied. The order of priority (from the lowest to the highest) is Read, Control, Modify, No access.

Example
There are defined groups of objects - Group1 and Group2. Group1 contains all bitmaps - [BITMAPS] and the group is assigned to user with Modify level of user access. Group2 contains, except others, objects - bitmaps BOILER01.BMP and CONTAINER03.BMP and they are assigned to user with No access level of access rights. The situation implies, that user may work with objects BOILER01.BMP and CONTAINER03.BMP with Modify level but also No access level. There will be used No access level of access rights, because it has higher priority than Modify level. It means, that user can work with all bitmaps in the system except bitmaps BOILER01.BMP and CONTAINER03.BMP. 

Implicit access to reference objects

If user has the access to an object, after opening the object he/she automatically get access (Read only level) to reference objects of the object.

Example
User has the access to a picture, but he/she doesn't have the access to objects linked to the picture. He/she gets the access to read the linked objects after opening the picture. This implies, that operator can see values of objects without any access rights to them.

To define users and their access rights use the process D2000 CNF.