Access Control Lists

Access Control Lists (ACLs) enable you to create a mapping between access rights and users, and access rights and groups. ACLs enable you to assign access rights on content and dimensions.

Access Control List Properties

This section describes the properties of an access control list, as shown on the corresponding Edit pane.

Property Description
Label (language)

Type a label and description for this access control list. One entry per supported language. This is the display name for the access control list.

External key

Type an additional identifier for this access control list. An external key is used in code that integrates external services with this iKnowBase access control list.

Owner Id (Personal ACL)

Displays the owner of the access control list.

Visible

Select this check box to enable users to view this access control list.

This property indicates the availability of this access control list while publishing content.

Acl members

Displays a list of users and groups which are members of this access control list, together with their member privileges.

See following table for information about member privileges:

Privileges Description
Name Displays the name of the user or group to whom you are assigning privileges.
All Select this check box to grant all access privileges to the user.
Read Select this check box to grant the privilege to read content in iKnowBase.
Modify Select this check box to grant the privilege to read and modify content in iKnowBase.
Protected Select this check box to grant the privilege to view dimensions that are protected with the current access control list in iKnowBase. This property is only available for dimensions.
Delete Select this check box to grant the privilege to delete content in iKnowBase.
Approver Select this check box to grant the privilege to approve the publication of content in iKnowBase.
Creatable Select this check box to grant the privilege to create content in iKnowBase.
Categorize Select this check box to grant the privilege to categorize content with a dimension that is protected with the current access control list.
Valid from Type the date from which member is valid. Note: Format “dd.mm.yyyy”.
Valid to Type the expiry date for this member. Note: Format “dd.mm.yyyy”.

Tasks

See earlier chapter for information about common tasks like create, view, copy, update, and delete. This chapter describes specific tasks for access control lists.

Adding and Removing ACL Members

You can add users and groups as members to an access control list to grant certain rights and privileges to them.

To add a user / group to an access control list, perform the following steps:

  1. On the Edit pane for the access control list, click the Add user / Add group action.
  2. Click the select action for the user / group that you want to add as a member to this access control list.
  3. Select the privileges that you want to assign to this user / group. The previous table lists each privilege and their description.
  4. Click Save.

Note: You can add multiple users / groups by using the action Add multiple users / Add multiple groups. This will also open the window containing a list of existing users / groups. This window will remain open until you click the Close button. Each time you click the select action for a user / group, this user / group will be added as a member of the access control list.

To remove members from an access control list, perform the following steps:

  1. On the Edit pane for the access control list, click the remove action for the member to be removed.
  2. Click Save.