As it was mentioned in chapter 85 “Access control basics”, five of six pages of the property sheet “Properties of user” are intended for viewing and changing permissions of selected user to GDB and its components grouped in five categories: permissions to GDB as a whole, permissions to maps, themes, tables and queries.
It should be noted that in two cases permissions can be only viewed but not changed:
permissions of GDB administrator cannot be changed, he always has all permissions;
the current user cannot change his own permissions.
An attempt to change permissions for GDB administrator or for the current user leads to displaying of a message about inadmissible operation “Cannot lower permissions for administrator” or “Cannot change permissions for current user”.
Besides, possibilities of granting and revoking different permissions are limited by permissions set at a higher level as it was described in the previous section.
In the upper part of each page describing access to each type of GDB components (but not of the page of permissions to GDB as a whole) there is a checkbox General permissions …, under it there is a list pane of all components of the given type, still lower – a set of checkboxes permitting granting and revoking user permissions. A checked box denotes granting of the corresponding user permission (see figures 87-2 – 87-5). If the box General permissions … is checked, the list pane is disabled, the rest checkboxes indicate (and allow for changing) the status of general permissions, that is, permissions relating to all components of the present type. If the box General permissions is cleared, the rest checkboxes display and allow for change of user permissions with respect to component selected in the list.
If some permission is revoked for the present user on the general level it is impossible to grant this permission for a particular component. If there is a general permission it is possible to revoke access for some particular components.
General permissions for themes belong not only to all cataloged themes, but to browsed themes as well. General permissions for queries belong not only to all cataloged queries, but to browsed tables and queries as well. Thus, for example, if search at the level of general permissions for all queries is disabled, search for all tables will be disabled actually since there is no other way of setting search condition for a table except for the one via the browser window.
Checkboxes setting different permissions are not independent. Changing of some permissions of a more general scope automatically leads to changing dependent, more particular permissions. Thus, for example, disabling changing of data of some component causes disabling of changing its structure as well. An attempt to grant permission which is not coordinated with a more general permission causes display of the message “Permissions on high level do not admit this change” as it was mentioned before.
The first checkbox of permissions on all pages of access to components (but not on the page of access to GDB) is called Access. It controls the basic permission to component – the right to see this component in lists of GDB components. This permission is of a higher level than others, its revoking causes revoking of all other permissions.
 |  |
