Planning how to assign privileges

You need to understand the privileges required to run designs and perform other tasks, so you can devise an effective security strategy. Table 8‑1 lists the privileges that a user needs to perform typical tasks with items in the Encyclopedia volume. You set the privileges on a particular item in the Encyclopedia volume, such as a design or folder.

Table 8‑1 Privileges to access files and folders
Tasks	Required privileges
Copying an item from one folder to another	Visible—item Visible—destination folder Write—destination folder
Deleting a folder	Visible—folder Delete—folder Delete—files in the folder
Deleting a file	Visible Delete
Downloading contents of a document	Read
Downloading a document with restricted content	Read and Execute
Moving an item	Visible—item Visible—destination and source folders Write—destination and source folders
Opening an Actuate search definition (.ros) file created by another user	Visible—the search definition file Read—the document file Read and execute—the executable file
Printing a document on an iHub printer	Visible Read
Reading contents of a document	Read
Reading restricted contents of a document	Secure read
Running or scheduling a design to run	Read, secure read, or visible—design Execute—design Delete—pre-existing document file if the run replaces it
Running a document with restricted content	Secure read—document
Setting privileges to access an item	Visible Grant
Viewing a file or folder in a list of files or folders	Visible, read, or secure read
Viewing the properties of an item	Visible, Read, or Secure read

Table 8‑2 Privileges to channels
Tasks	Required privileges
Reading a notice in a channel	Read or Secure read—document the notice contains
Sending a notice to a channel	Write
Subscribing to a channel	Read
Updating the contents of a channel	Write—channel
Viewing a channel	Read