Chapter 10 - Security - Revision history

Tomh: /* Editing an existing user set up */

2014-07-29T19:49:52Z

‎Editing an existing user set up

Tomh: /* Adding a new user */

2014-07-29T19:48:41Z

‎Adding a new user

Tomh: /* Adding a new user */

2014-07-29T19:47:59Z

‎Adding a new user

Tomh: /* Editing an existing user set up */

2014-07-29T19:30:55Z

‎Editing an existing user set up

Tomh: /* Editing an existing user set up */

2014-07-29T19:30:24Z

‎Editing an existing user set up

Tomh: /* Editing an existing user set up */

2014-07-29T19:29:41Z

‎Editing an existing user set up

Tomh: /* Editing an existing user set up */

2014-07-29T19:24:21Z

‎Editing an existing user set up

SSprencel at 21:01, 20 April 2011

2011-04-20T21:01:36Z

SSprencel at 20:57, 11 June 2010

2010-06-11T20:57:23Z

SSprencel at 20:55, 11 June 2010

2010-06-11T20:55:57Z

@@ Line 43: / Line 43: @@
 [http://help.halfile.com/index.php?title=Chapter_10_-_Security#column-one Contents]
-# Double click the user id, or highlight the user and press the '''edit''' button to view the User Parameters.
+# Double click the user id, or highlight the user and press the edit button to view the User Parameters as shown below. This shows all the databases that the user can access as well as the privileges allow for each database.
-# Set up the user's profile as described under 'Adding a new user', above.
+# Set up the user privileges as described under ‘Adding a new user’ above.
 [[File:User_Profiles_New_User.jpg]]
 ==Windows Active Directory Integration==

@@ Line 36: / Line 36: @@
 # For each database that you give the user access to, check the privilege boxes to allow the user to perform an activity (scan, search, index etc.).
 # When a database row is clicked, the "extended settings" box in the lower left is updated to show additional security settings for this user and database. This is used to enable/disable menu selections in the system such as deleting documents and performing image annotations.
 ===Editing an existing user set up===

@@ Line 32: / Line 32: @@
 [http://help.halfile.com/index.php?title=Chapter_10_-_Security#column-one Contents]
-# Click the '''add''' button to display the user profile screen.
+# Click the add button to display the User Parameter screen.
-# The left box shows all the databases that have been defined, consisting of an application id plus the document type. The frame at the bottom of the screen shows the global privileges the user is allowed to perform (scan, index, search, set up, archive, system administrator, all databases).
+# All the databases are listed (see the sample screen below) with no access to any database. The first column named Access gives a user rights to use a database.
-# Click on the '''privilege''' buttons that you wish the user to perform. If you click the '''all databases''' button, then you do not need to select databases for the user. The user is automatically given rights to perform the selected global privileges for all databases.
+# For each database that you give the user access to, check the privilege boxes to allow the user to perform an activity (scan, search, index etc.).
-# If the '''all databases''' button is not selected, you must add the databases the user can access into the right-hand box. To do this, double-click a database in the left-hand box or click a database in the left-hand box and press the '''Add''' button. This adds the database to the user's list and gives the user the default, global privileges for that database.
+# When a database row is clicked, the "extended settings" box in the lower left is updated to show additional security settings for this user and database. This is used to enable/disable menu selections in the system such as deleting documents and performing image annotations.
 ===Editing an existing user set up===

@@ Line 54: / Line 54: @@
 The check box in the Access column for each database gives the user access to that database. The check boxes across the screen for the database give the user access to database privileges (scan, search, index, etc).
-When a database row is clicked row, the "extended setting" box in the lower left is updated to show additional security settings for this user and database. This is used to enable/disable the menu selections in the system such as deleting documents and performing image annotations.
+When a database row is clicked row, the "extended setting" box in the lower left is updated to show additional security settings for this user and database. This is used to enable/disable menu selections in the system such as deleting documents and performing image annotations.
 ==Windows Active Directory Integration==

@@ Line 54: / Line 54: @@
 The check box in the Access column for each database gives the user access to that database. The check boxes across the screen for the database give the user access to database privileges (scan, search, index, etc).
-When click on a database row, the "extended setting" box in the lower left is updated to show additional security settings for this user and database. This is used to enable/disable the menu selections in the system such as deleting documents and performing image annotations.
+When a database row is clicked row, the "extended setting" box in the lower left is updated to show additional security settings for this user and database. This is used to enable/disable the menu selections in the system such as deleting documents and performing image annotations.
 ==Windows Active Directory Integration==

@@ Line 41: / Line 41: @@
 [http://help.halfile.com/index.php?title=Chapter_10_-_Security#column-one Contents]
-# Double click the user id, or highlight the user and press the '''edit''' button.
+# Double click the user id, or highlight the user and press the '''edit''' button to view the User Parameters.
-# Set up the user's profile as describes under 'Adding a new user', above.
+# Set up the user's profile as described under 'Adding a new user', above.
 To remove a user, highlight the user and select '''File-Delete'''.
@@ Line 48: / Line 48: @@
 To close the user screen, select '''File-Close'''.
-The following screen shows a user profile. This user has no database restrictions since the '''All Databases''' button in the User Privileges frame is turned on.
+The following screen shows the User Parameters. This shows all the databases that the user can access as well as the privileges allow for each database.
 [[File:User_Profiles_New_User.jpg]]

@@ Line 9: / Line 9: @@
 ==Security Set Up==
 To set up security, select '''Configure-Security''' and click the '''Enable Security''' sub-menu in the Administrator. This places a check mark on the sub-menu and tells the system that system security is enabled. If you click this sub-menu when it is checked, the security system is disabled and the check mark is removed.
@@ Line 28: / Line 30: @@
 ===Adding a new user===
 # Click the '''add''' button to display the user profile screen.
 # The left box shows all the databases that have been defined, consisting of an application id plus the document type. The frame at the bottom of the screen shows the global privileges the user is allowed to perform (scan, index, search, set up, archive, system administrator, all databases).
@@ Line 35: / Line 39: @@
 ===Editing an existing user set up===
 # Double click the user id, or highlight the user and press the '''edit''' button.
 # Set up the user's profile as describes under 'Adding a new user', above.
@@ Line 55: / Line 61: @@
 ==Windows Active Directory Integration==
 Windows Active Directory is a powerful tool for maintaining network users across multiple servers and domains. halFILE and e.halFILE can be configured to integrate with Windows Active Directory. This lets you set up Windows Active Directory Groups containing users that have similar security properties in halFILE. Then in halFILE, you do not need to set up each individual user, only the groups that match the Windows Active Directory Groups. When you add a user to a Windows Active Directory group, that user automatically inherits the privileges of that group when going into halFILE. Furthermore, no login to halFILE is required. The user is automatically logged in under the network user id.
 ===Why use Active Directory Integration?===
 * Administer users from one place, Windows Active Directory.
@@ Line 65: / Line 74: @@
 ===Before you start===
 Before you enable the Active Directory Integration feature in halFILE, you should spend some time planning your groups. These groups will be used to assign User Privileges (Configure-Security-User Profiles), Custom Search Settings (File-Database Custom Search button) and User Features (Extended Settings behind the database privileges in Configure-Security-User Profiles).
 ===halFILE Active Directory Integration Set Up Procedure===
 # Set up a Windows Active Directory Group for each type of User that you would have in halFILE. For example, if I have Search only users, Search and Index users and Admin users, I would set up 3 Active Directory Groups as follows:
@@ Line 84: / Line 95: @@
 ===halFILE Active Directory Integration===
 Once the setup is complete, you should run HFWAD32.EXE to login to halFILE using Windows Active Directory Integration. This program determines what groups the user belongs to and set up the halFILE security privileges accordingly. Then it continues on to the halFILE Manager (halfile.exe).
@@ Line 89: / Line 101: @@
 ===e.halFILE Active Directory Integration===
 e.halFILE uses the same security setup as halFILE. However, there are some special set up requirements in Microsoft Internet Information Services (IIS) that need to be configured as follows:
@@ Line 97: / Line 110: @@
 ===Active Directory Integration - Behind the Scenes===
 New tables in the HFWParams database are used to store the above information including:

@@ Line 44: / Line 44: @@
 The following screen shows a user profile. This user has no database restrictions since the '''All Databases''' button in the User Privileges frame is turned on.
-[[File:User Profiles New User.jpg]]
+[[File:User_Profiles_New_User.jpg]]
 When you double click a database in the "databases the user can access" box, the screen below is shown. You can set up the user privileges for the database on this screen.
@@ Line 52: / Line 52: @@
 The "extended setting" button brings up the following screen for additional security settings for this user and database as shown below. This is used to disable the menu selections shown.
-[[Files:User_Profiles_Details.jpg]]
+[[File:User_Profiles_Details.jpg]]
 ==Windows Active Directory Integration==