Authorities

Authorities are people (or persons) or groups.

A group can contain people or other groups as members. The authorities assigned to a user at any time are the userName from their associated Person node, all of the groups in which the user is a direct or indirect member, and any appropriate dynamic authorities. Dynamic authorities are used for internal roles.

Dynamic authorities and roles SkyVault uses some custom roles. To implement a custom role, you create a dynamic authority for that role and assign global permissions to it. The SkyVault internal roles have not been assigned any object-specific rights.
People and users When a user logs in, SkyVault validates the user’s identifier and password. SkyVault uses the identifier to look up the appropriate person details for the user, using the userName property on the Person type. You can configure this look-up to be case sensitive or case insensitive. The userName property on the matching Person node is used as the actual user authority; it might differ in case from the user identifier presented to the authentication system. After the Person node look-up, SkyVault is case sensitive when matching authorities to permissions, group membership, roles, and for all other authorization tests.
Groups Groups are collections of authorities with a name and display name.
Zones All person and group nodes are in one or more zones. You can use zones for any partitioning of authorities. For example, SkyVault synchronization uses zones to record from which LDAP server users and groups have been synchronized. Zones are used to hide some groups that provide Role Based Access Control (RBAC) role-like functionality from the administration pages of SkyVault Share. Examples of hidden groups are the roles used in SkyVault Share and Records Management (RM). Only users and groups in the default zone are shown for normal group and user selection on the group administration pages. Zones cannot be managed from the administration pages of SkyVault Share.

Parent topic: Setting up authentication and security

Search form

Search form

You are here