Assigning Template and Field Access Rights

To assign field or template access rights:

1. Start the Laserfiche Administration Console.
2. In the console tree, expand the desired Laserfiche Server item.
3. Select the desired Laserfiche repository.
4. If security has been enabled on that repository, log in as any user who has been granted the Manage Templates and Fields privilege for the specified repository, or the Write field security or Write template security access right for the field or template.
5. Select the Fields or Template node under Metadata Management.
6. Click the desired field or template.

Tip: You can also select more than one field to modify field security for several fields at once.

7. From the Action menu, point to All Tasks and click Security. The Field Security or Template Security dialog box will appear.
8. The Assign Rights tab will display a list of trustees. A new repository will contain the EVERYONE trustee and the ADMIN trustee. Below the list of trustees is the list of access rights for the selected trustee.
9. To modify an existing set of access rights, select a trustee from the list. Double-click the current setting for the right (Allow, Deny, or blank) to modify the setting. (For a list of all available rights and what they control, see Field Access Rights and Template Access Rights.)
• Allow: If a user has been allowed a right, either directly or through a group they belong to, they will have that right unless they have also been denied it.
• Deny: Denied rights always take precedence, so that if there is an accidental conflict in rights, documents will be less accessible rather than more accessible. For instance, if a user has been Allowed a right, but one of their groups has been Denied it, they will not have that right.
• Blank: If a right is left blank, neither allowed nor denied, then by default it is not granted. However, if there is a rights conflict between allowed or denied rights and blank rights, the rights that are specifically allowed or denied will take precedence.
10. To add a new access right, click Add.... This will open the Find Trustee(s) or Domain Account(s)
1. In the Select a trustee option, select the trustee you want to add.
2. Click OK.
3. In the Field Security or Template Security dialog box, add or remove rights as above.

Note: In the Template Security dialog box, you can also modify the field access rights for the fields contained in the template in the Current field access rights option. Note that this will modify security for that field across the entire repository, not just for the currently-selected template.

11. To remove an access right, select the trustee and click Remove.
12. Click OK to save your modifications.

To assign field or template access rights:

1. Open the Laserfiche web client management page. Sign in as any user who has been granted the Manage Templates and Fields privilege for the specified repository, or the Write field security or Write template security access right for the field or template.
2. Select Metadata, then Fields or Templates.
3. Select the desired field or template.
4. In the top right corner, select View security (if you had selected a field) or Default Security (if you had selected a template). Depending on your browser window size, you may need to select More Actions in order to see these buttons.
5. The Assigned Rights tab will display a list of trustees. A new repository will contain the Everyone trustee and the ADMIN trustee. When you select a trustee, their field access rights will display in the bottom section.
6. To modify an existing set of access rights, select a trustee from the list. Check or clear the current settings for Allow or Deny to modify the setting. (For a list of all available rights and what they control, see Field Access Rights and Template Access Rights.)
• Allow: If a user has been allowed a right, either directly or through a group they belong to, they will have that right unless they have also been denied it.
• Deny: Denied rights always take precedence, so that if there is an accidental conflict in rights, documents will be less accessible rather than more accessible. For instance, if a user has been Allowed a right, but one of their groups has been Denied it, they will not have that right.
• Blank: If a right is left blank, that is, neither allowed nor denied, then by default it is not granted. However, if there is a rights conflict between allowed or denied rights and blank rights, the rights that are specifically allowed or denied will take precedence.
7. To add access rights for a trustee who is not listed in the dialog, click Add. This will open the Select Trustee dialog box.
1. In the Enter user name option, type in the user name and click search. Select the desired trustee.
2. Click OK.
3. Add or remove rights for the trustee following the instructions in step 6.
8. To remove an access right, select the trustee and click Delete.
9. Click OK to save your modifications.