BLOB Component-Level Security

Component-level security can be applied to single files or groups of files in a BLOB Storage Service.

Examples of BLOB component-level security:

• You can provide all users access to a single CygNet Studio screen stored in the BLOB, such as an overview screen, but not to other screens. When using Studio, the users will get an "access denied" message when trying to open other files (using the menu or a HyperLink).
• You can provide all users access to all CygNet Studio screens, but only select users access to a screen that contains control elements.
• You can provide certain users access to utilities stored in the BLOB by including all of the files in the same BLOB group and giving those users access for that group.

You must have at least Level 2 authorization for the service’s ACCESS event to change the properties of a record.

BLOB File and BLOB Group security take precedence over service-level security. BLOB File security takes precedence over BLOB Group security. Keep in mind that Level 5 authorization for the service (i.e., Service Administrative Security) trumps all component-level security.

The Application and Event(s) that you apply to BLOB component security can be custom or you can use an existing Application and Event. It may be easier to track component security if you use a custom Application name. If you create a custom Event, the authorization levels for the Event parallel those of the BLOB ACCESS Event. For example, you have to have Level 1 authorization to view the file.

To Configure BSS File Level Security

1. In the ACS, create an Application and Event for the file and define permissions for the Event.
2. In the BSS, right-click on the file in the BLOB service pane and click Properties.
3. In the BLOB File Level Security area, click … next to the Event box.
4. Select the Application and Event name and click OK to return to the file properties box.
5. Click OK to save the file properties.

To Configure BSS File Group Security

When configuring file group security, you have to define the security only for one file in the group. The security will information will be written to all files in the group.

Once the group security is saved, the BLOB creates a file for the group named “BSS Security Settings.~” You can use this entry to modify the security for the group.

Group security file created by the BLOB

1. In the ACS, create an Application and Event for the file group and define permissions for the Event.
2. In the BSS, right-click on a file in the group in the BLOB service pane and click Properties.
3. In the BLOB Folder Level Security area, click … next to the Event box.
4. Select the Application and Event name and click OK to return to the file properties box.
5. Click OK to save the application group properties.

To Clear File Level or Group Level Security

1. In the BSS, right-click on the file in the BLOB service pane and click Properties.
2. In the applicable security area (File Level or Group Level) click the None button to clear the setting.
3. Click OK.