How to assign privileges to favorites
PPM offers you the option to handle access privileges for favorites flexibly. You can assign read, write, and administration privileges for favorites to individual users or user groups.
Access privileges for individual favorites are assigned by privilege assignment to shared favorites folder. Users receive the access privileges for specific shared favorites folders and thus for the favorites stored in these folders.
The following privileges are available for this type of differentiation.
Favorites administration function privilege
Folder-specific access privileges
Read
Write (includes the Read privilege)
Administration (includes the Read privilege)
By combining the various privileges you can implement a flexible authorization concept.
Read access privilege
Users can read and call favorites contained in these folders.
Users can export favorites stored in these folders.
The access privilege may be withdrawn.
Write access privilege
Users can call, change, create, and delete favorites contained in these folders.
Users can create, delete, move, and rename subfolders as long as the subfolders and the current folder are assigned the write privilege.
Users can share private favorites contained in folders with the write privilege.
Users can export favorites stored in these folders.
The access privilege may be withdrawn.
Administration access privilege
Users can read and call favorites contained in these folders.
Users can assign access privileges to other users.
The access privilege applies to the entire tree branch.
Users can export favorites.
Users can import favorites via the user interface (access privileges are ignored).
The access privilege can be withdrawn only if it has not been inherited from the superordinate node.
Favorites administration function privilege
Users have unrestricted access to all shared favorites and folders.
Users can assign access privileges to other users.
Users can share private favorites.
Users can export favorites.
Users can import favorites via user interface and command line (access privileges are imported).
The access privilege cannot be withdrawn.