Security Guide

Back Next

Global Objects Privilege Group

Privileges in the Global Objects privilege group and

CDI-PC repository

object permissions determine actions users can perform on the following global objects:

Connection objects

Deployment groups

Labels

Queries

Some global object tasks are determined by global object ownership and the Administrator role, not by privileges or permissions. The global object owner or a user assigned the Administrator role for the

CDI-PC Repository Service

can complete the following global object tasks:

Configure global object permissions.

Change the global object owner.

Delete the global object.

Users assigned permissions but no privileges can perform some actions for global objects. The following table lists the actions that users can perform when they are assigned permissions only:

Permission	Description
Read on connection object	User is able to view connection objects.
Read on deployment group	User is able to view deployment groups.
Read on label	User is able to view labels.
Read on query	User is able to view object queries.
Read and Write on connection object	User is able to edit connection objects.
Read and Write on label	User is able to edit and lock labels.
Read and Write on query	User is able to edit and validate object queries.
Read and Execute on query	User is able to run object queries.
Read on folder Read and Execute on label	User is able to apply labels and remove label references.