Setting Access Control on Repository Level
Access control defines who can access what in ADx. This page explains how to set it on a repository in ADx. You will need a working ADx installation as well as administrator priviledges.
On this page
Allowing or Preventing Users from Connecting to a Repository
Default repository access control defines if the repository is available to all users by default or restricted from all users. Default access control is overridden by existing ACL entries. Watch the video or read the instructions below to see how it's done.
Video
Instructions
-
Log in to ADx. Open Administration area:
-
Select a repository and click Details. Repository editing view opens and the following sections are available:
This is a collapsed view. Click on the headings to expand and collapse the properties inside.
-
Go to the Access Control section at the bottom of the form. Set the access as required:
-
Click Create and add, then Apply to confirm your changes and exit the form.
-
Synchronize the repository. Your changes are now online.
Denying Certain Operations for Some Users on the Repository Level
-
Log in as an administrator.
-
Select the repository you want to deny certain operations for, and then double-click this repository.
-
Click Access Control, and on the right side, click ACL.
-
Go to the Access Control section at the bottom of the form, make sure the repository has Grant in Default Connectivity.
-
Click Add under ACL Entries:
A list of available entries appears. These entries represent actions to be granted to or restricted from a specific role.
-
Select an entry from the list. ACL entries represent specific actions inside a repository. See the full list of action.
-
Having selected an entry, click Deny, and then select a Role. Repeat these steps for each user or role you want to deny access to these actions.
-
Click Create and add, then Apply to confirm your changes and exit the form.
-
Synchronize the repository. Your changes are now online.
Allowing Only Certain Users to Perform Certain Operations on the Repository Level
-
Log in as an administrator.
-
Select the repository you want to deny certain operations for, and then double-click this repository.
-
Click Access Control, and on the right side, click ACL.
-
Go to the Access Control section at the bottom of the form, make sure the repository has Deny in Default Connectivity.
-
Click Add under ACL Entries:
A list of available entries appears. These entries represent actions to be granted to or restricted from a specific role.
-
Select an entry from the list. ACL entries represent specific actions inside a repository. See the full list of action.
-
Having selected an entry, click Deny, and then select a Role. Repeat these steps for each user or role you want to grant access to.
-
Click Create and add, then Apply to confirm your changes and exit the form.
-
Synchronize the repository. Your changes are now online.
Granting or Denying Certain Repository Actions - Video
Available Operations for Repository Access Control
ACL Entry | Explanation |
---|---|
ADD_ATTACHMENT | Grants or denies permission to add a comment in WebReader |
ADD_TO_FOLDER | Grants or denies permission to add contents to folders |
CONNECT | Grants or denies permission to connect to the repository |
CONVERT | Grants or denies permission to convert contents |
ConditionalAclEntry | |
DELETE | Grants or denies permission to delete entries |
DOWNLOAD | Grants or denies permission to download contents |
DOWNLOAD_REPRESENTATIONS | Grants or denies permission to download content representations |
EDIT_ONLINE | Grants or denies permission to edit contents online (if this feature is configured) |
MODIFY_ACL | Grants or denies permission to change the Access Control settings on repository entries |
MOVE | Grants or denies permission to move repository entries |
MOVE_ATTACHMENT | Grants or denies permission to move WebReader comments |
READ | Grants or denies read access to repository entries |
REMOVE_ATTACHMENT | Grants or denies permission to delete comments in WebReader |
REOPEN_ATTACHMENT | Grants or denies permission to reopen a WebReader comment that has already been resolved |
REPLACE_ACL | |
RESIZE_ATTACHMENT | Grants or denies permission to resize WebReader comments |
RESOLVE_ATTACHMENT | Grants or denies permission to resolve WebReader comments |
SHOW_REPRESENTATIONS | Grants or denies permission to open content representations view from ADx Explorer |
UPDATE_RESOURCE | Grants or denies permission to update contents |
VERSION | Grants or denies permission to check in and check out contents |
VIEW_ONLINE | Grants or denies permission to view contents online (if this feature is configured) |
WRITE | Grants write access to repository entries |
REST API
Currently, the configuration of repository-level access control is not exposed via REST API.