In XBOUND you can control which actions certain users or groups can perform by assigning them privileges or rights. You can also specify that certain types of documents can be displayed and processed only on certain computers ("protected work areas") for security reasons.
A privilege allows certain actions independent of individual objects. For example, you can specify which users are allowed to log on to XBOUND.
Privileges can also be assigned to certain object types. For example, you can specify which users can delete media (which is an object type). You can set up role-based privileges and/or assign privileges manually.
There are many predefined privileges ready for you to use for handling security. These range from the very general, such as the ability to manage the XBOUND system, right down to the very specific, such as the ability to edit documents in the Process Monitor.
You can also add your own privilege definitions, and transfer them between XBOUND systems by exporting and importing them.
The Security Manager is used to manage privileges and privilege definitions. The easiest way to set up role-based privileges is to use the Security Wizard. The wizard starts automatically after you initialize the XBOUND platform.
A right allows users to perform certain actions on a single object. For example, you can specify which users are allowed to delete a certain process. Rights are assigned on the object level. (See instructions.)
You can also specify that certain types of documents can be displayed and processed only on certain computers ("protected work areas").
The Security Manager is used to define which computers comprise the protected work areas. Then you use the Process Designer to specify which types of documents should be restricted to those work areas. For more information see Limiting access to documents.