Edit Lifecycle State Security

Control which members and groups can read, modify, or delete an object assigned to a state from the Security tab of the Lifecycle Definition dialog box.

Using State-Based Security

There are three ways to define the security of an object:

• Object-based security– security is derived from the object settings. This is the default option.

  Note: Items do not have object-based security.

• State-based security– available when a state-based ACL exists and is combined with object-based security.

• Overridden security– available when a state-based ACL is overriding object-based security, or when the administrator sets a manual override on the object.

State-based security is either combined with object-based security or overrides object-based security, based on the Definition Security defined for the lifecycle definition.

Define State-Based Security

Access Security for a Lifecycle State

1. Click Tools > Administration > Vault Settings.
2. In the Vault Settings dialog, click the Behaviors tab > Lifecycles.
3. In the Lifecycle Definition dialog, select the name of the life cycle definition and click Edit. The selected definition name appears in the title bar.
4. Select the state for which you want to define security.
5. Select the Security tab to display the current security settings for that state.

Disable State-Based Security

• Click No state-based security if you don't want to assign security for the state. Security is determined by the permissions assigned to the object.

Add a Member or Group Permission to a Lifecycle State

1. On the Security tab, clear the No state-based security check box if it is selected.

2. Click Add.

3. In the Add Members dialog, select the member or group from the Available Members list, and then click Add. The selected name is moved to the Current Members list.

   Note: Filter the Available Members list by selecting a qualifier from the Select Members From list.

   From the Current Members list, select one or more members, and then click Remove to modify the current members list.

4. Click OK.

Remove a Member from a Lifecycle State

1. In the Lifecycle Definition dialog, select the state from the Lifecycle States list.
2. On the Security tab, select the member or group and click Remove.
3. Click OK.

Edit Member or Group Permissions

1. In the Lifecycle Definition dialog, select the state from the Lifecycle States list.

2. On the Security tab, select the member or group to edit.

3. In the Permissions box, select the Allow, Deny, or <blank> permission for the Read, Modify, and Delete columns for each member.

   Permission	Access
   Read	Allow-Object can be viewed Deny-Object cannot be viewed. If a member is denied read access then they are not allowed Modify or Delete access either. None-Object cannot be viewed
   Modify	Allow-Object can be modified Deny-Object cannot be modified None-Object cannot be modified
   Delete	Allow-Object can be deleted Deny-Object cannot be deleted None-Object cannot be deleted
   Download	Allow-Object can be downloaded Deny-Object cannot be downloaded None-Object cannot be downloaded

   For example, for Read-only access, select Allow for Read, and Deny for Modify and Delete.

   See Access Control Lists for more information about permissions.

4. If you want to configure security for files associated with items, select Security for associated files of items.

   Note: See Edit Lifecycle State Security for Files Associated with Items for more information.

5. If you want to propagate state security permissions for a folder to its files, select Security for files inside folders.

   See Edit Lifecycle State Security for Files Inside Folder for more information.

6. Click OK to save the changes and close the dialog.