The access rights of an item in SystemWeaver are controlled by both the server's system-wide Security level setting (optional) and the Library security settings. The settings of a library apply to all items in that library, similar to the way access rights of computer files are managed in file systems. However, the access right of an item is not automatically extended to the parts of the item, which, as individual items, may belong to a different library. An item can only belong to one library. Library access can be given to individual users, but it is more practical to assign rights to groups of users.
There are many reasons for using the security system in SystemWeaver:
- Avoid modifications made by mistake, e.g., by users reviewing an item.
- Formalized control of a development process, where only certain users have the right to change certain items.
- To protect information by using Read restriction. Using read protection means that users who are not allowed to read all information can still work in the same system model as other users, but will only see the items they are granted access to.
|Note: The library in SystemWeaver is a means of managing access rights to items and is not a location where an item is stored.|
- Use as few libraries as possible. The libraries should instead contain many items. The libraries should not be used for managing items apart from access security. Other aspects can normally be solved by using proper modelling principles. The reason for this recommendation is to avoid explosive increase in the amount of libraries and the administrative work that may become a result of this.
- The appropriate security level is a balance between different interests. In the beginning of a project there is usually a need for simplified work at the expense of control, especially since less value has been invested in the system models. Later on when the system is settled the need for control becomes more important. These principles can be supported by using the appropriate security level, and the appropriate definition of user groups.
- Only a few number of users should have Write and Change right to the root library. This way the library structure is more easily controlled.
- Use groups rather than users when setting access rights. The reason for this is to minimize the number of settings, and to facilitate changes in a secure manner.
The Manage Libraries view is used to view and manage libraries and access rights to them. The Libraries view displays a selected item's associated library structure.
Manage Libraries View
Manage libraries is where you can administer libraries and the access rights associated with the libraries. To access it, click on Manage libraries in the Security menu group.
The Libraries page will display the library structure to the left and the properties of the selected library to the right.
Tip: If you have selected a library in the Libraries view, that library will automatically be selected when you open a Manage libraries page.
The name of the root library at the top, by default called "Root", is displayed in the title row of the application, In the example below, it has been renamed to : "Variability demo database".
If your organization is running multiple SystemWeaver servers, like production servers and test servers, you can change this name to something more specific, in order to easier distinguish between them.
The library structure can be expanded or collapsed as needed using these options in the context menu or by double-clicking on a library:
When a library is selected, the following information will display to the right:
The Name of the library can be edited in the name box, which requires Write rights to the library.
The Owner of the library. You can use the Change button to the right of the Owner to change the owner. This option requires Change rights to the library. Note that the owner of a library always has change rights to it.
The Created and ID properties cannot be changed. (The ID property can be useful for automated solutions where the SystemWeaver API is used, but is of little use to a regular user.)
The Description field is the place to describe the purpose of the Library. The description is a fully formatted SystemWeaver description, so you can include formatted text and pictures. You can double-click to access the Description editor.
The Access Rights pane is where you set up access rights to a library.
Finding a Library
You can locate a specific library by browsing in the library tree, using the Find button (or Ctrl+F shortcut), or, while in the tree, typing the initial letter of the library you are searching for.
Moving a Library
To move a library, first copy it (Ctrl+C or use the context menu option shown below), then click on the new location and select Move Library here in the context menu. Confirm your move with OK. The library will be moved from its current location to the selected library. This action requires that you have Write rights to the destination library.
Learn more about Libraries and access rights by browsing or searching the Help or Support Portal.