LL

Hi all,

Does anyone has the idea how can I assign rights of a user X only to one particular process from a Model group. I need this because I don't want this user to see this particular process when I publish tthe whole DB in Aris Publisher.

Thank you in advance

Lubo

 

 

by M. Zschuckelt
Posted on Tue, 07/14/2015 - 15:43

Hello Lubo,

ARIS access privileges are defined on group level. So the way for you to go is

1. create a new group under the group where your model currently is. Usually this group inherits all access privileges from the group above where you create it.

2. Move the model (without objects) to the new group

3. Change the access privileges on this group. Observe, that a user accumulates the access privileges of all groups he is a member of. So you have to remove him from all groups, that have read privileges on the group. If you have individual access privileges for users, just withdraw all access privileges for the user on the group.

Hint: If there are only certain objects the user should not be able to inspect, you have to make sure that the object definitions reside in groups the user has no read permissions on. No matter where there are occurrences of these objects the user will not see them.

Regards, M. Zschuckelt

 

0
by Lubo Lambo Author
Posted on Tue, 07/14/2015 - 16:01

Hi Zschuckelt,

Thank you a lot for detailed explanation.

Yes for now I also thought for such solution to put the model in another group. And about point 2. - without objects - why. If it is moved without objects will this user able to see also the objects

Regarding the objects in the model - some users copy models and paste them without objects in another model groups. As a result there are a lot of objects generated and left in the first group and it is impossible for me to degfine which object to which model it is or I can do it manually object by object and to move it in the respective group which is impossible with so many objects. Then I have some problems with when I am giving privileges to 1 user to some model there is a problem with so many objects everywhere. Now we are trying to train all the users how to copy and paste models from one database to another with different structure (Is there a manual for this somewhere). So my question also is do you know if there is some kind of report to show all the object?

 

Thank you again and have a nice afternoon

Lubo

 

 

0
by M. Zschuckelt
Posted on Tue, 07/14/2015 - 23:32

Hello Lubo,

you are right, essentially it does not matter. It really only depends on where you want to govern your objects.

You are right indeed, that in "hot" modelling phases with a lot of shifting around of models the objects may become "lost" in the sense that they are not close to "their" model anymore.

You need a governance concept, where the objects of each type belong and who owns them. E. g. if you have modelled Application system types you probably have an Enterprise Architect, who owns them and governs them in at least one library model. Anybody creating new application system types will have to submit them to the proper owner for registration in the library. Roles are likely to be governed by an owner in HR.

You can "Find..." (Ctrl+F) objects by object type and drag and drop everything, which is not in its proper place, from the search result to the respective library group directly. What will be left in your process groups are the functions and possibly the events.

Here is a trick, how to move multiple objects back to the model they belong to. Assuming Model X is in group A, but quite a few functions occurring in it have their object definitions in group B:

1. Move Model X to group B

2. Move Model X with objects back to group A. "Move with objects" only moves objects in the same group as the model being moved. Thus library objects will not move.

This works in ARIS 7.x and current versions of ARIS 9. Early ARIS 9 versions had a bug, which moved the objects from anywhere to the target group of the model movement. So try this on small scale first, if you are not on one of the latest versions.

If you want to get rid of objects without occurrences you can do a "Reorganization" of the database. Some users have that running every night to clean up the modelling debris. Just make sure to have everything in library models in case no one uses an object for a moment.

Regards, M. Zschuckelt

0
by Lubo Lambo Author
Posted on Wed, 07/15/2015 - 09:40

Hi Zschuckelt,

This information is very helpful, thank you a lot.

And one last question regarding Publisher - I know that it sounds easy but I cannot solve it - may be I am missing something. Yesterday we faced the following problem with the assigned privileges to model group for Publisher (till now we are working with Anonymous access, so we didn't tried with the new 9 version to assign user rights, that's why this problem arises just now). We are creating publisher export to 1 database (it is impossible to make it only for one model group - only to whole db, isn't it?)

In this DB we have user group with several users under it. The group is assigned to Aris Viewer license only - we want this group to see only the processes in Publisher and not to model in Designer (we have tried also if it has also access to Aris Designer - the result later is the same). Then in Aris Architecture we are removing the access to some model groups (---) and Pass on privileges to take all the levels under this group. 

And the result... unfortunately in Publisher when we log in with pass for this user - the model groups that we don't want this group to see are still visible. With old publisher I didn't have such problem at all - did I miss something. Should I restrict this rights somewhere else or ....

Sorry again for this basic question

Regards,

Lubo

 

 

0
by M. Zschuckelt
Posted on Wed, 07/15/2015 - 18:14

Hello Lubo,

did you publish again after removing the access privileges to the groups? Remember that the Publisher has got a separate database from the Design Server.

Besides: Please start a new thread for different questions. This way the whole community has the chance to draw attention to your question. I'm not the expert for everything.

Regards, M. Zschuckelt

0
by Lubo Lambo Author
Posted on Thu, 07/16/2015 - 10:09

Thank you Zschuckelt, i will try it and if I have problem I will start another topic. Sorry for overloading the topic and thank you for your time

KR

Lubo

0

Featured achievement

Rookie
Say hello to the ARIS Community! Personalize your community experience by following forums or tags, liking a post or uploading a profile picture.
Recent Unlocks

Leaderboard

|
icon-arrow-down icon-arrow-cerulean-left icon-arrow-cerulean-right icon-arrow-down icon-arrow-left icon-arrow-right icon-arrow icon-back icon-close icon-comments icon-correct-answer icon-tick icon-download icon-facebook icon-flag icon-google-plus icon-hamburger icon-in icon-info icon-instagram icon-login-true icon-login icon-mail-notification icon-mail icon-mortarboard icon-newsletter icon-notification icon-pinterest icon-plus icon-rss icon-search icon-share icon-shield icon-snapchat icon-star icon-tutorials icon-twitter icon-universities icon-videos icon-views icon-whatsapp icon-xing icon-youtube icon-jobs icon-heart icon-heart2 aris-express bpm-glossary help-intro help-design Process_Mining_Icon help-publishing help-administration help-dashboarding help-archive help-risk icon-knowledge icon-question icon-events icon-message icon-more icon-pencil forum-icon icon-lock