Category Security: Release 6.2.1 and beyond

Privileges related to Categories can be granted to a Group or User on their Editors > Info Tab or from the Category Editor > Permissions button.  Every Power User has an implied Privilege of "Create a new Category".

In addition, the following Privileges are available for assignment to Power Users:

  1. Allow Power Users to grant Category access to any User or Group
  2. Assign Category with View Access to Elements/Datasets
  3. Sort Category List. (new in Release 6.1.2)
    1. The Sort Categories Privilege revised in Release 6.2.5 allows PU's to sort Categories on the List page as well sort a Category's children (Subcategories) on its Editor.
      1. In addition to this privilege, the PU must also have Edit Access to the Category to perform these functions.

All of the above Privileges are standalone and can be granted one by one or all at once.

Permissions to a specific Categories are granted on the Group or User Editors > Elements tab or using the Category Editor > Permissions button. See the related Checklist article for more information.

In 6.2.5, a new System Variable is provided (DISPLAY_CATEGORY_SORT_AZ_BUTTON) is provided for use by customers that want to protect the sorting that one user has completed from being "undone" by another person using the Sort A-Z button on the Categories List Page.

 

As of Rel 6.2.3, the constraint that a Power User requires Category Access to edit an element or Datasets/User Map has been removed.  All Users can view elements/datasets without access to the object's Category as long as they have View Access to the object.  There is no Category Privilege related to this change.

1. Grant Privileges:  Group/User Editors > Info Tab

  1. Click [+Privilege to User (or Group)]
  2. Search on "Category"
  3. Select any of the listed Privileges
  4. [Save]

2. Associated Configuration Variable:  Admin > System > System Variables to control the ability to sort/not sort the Category List page grid

  1. Set the DISPLAY_CATEGORY_SORT_AZ_BUTTON Variable i to "Y"
  2. On the Content > Categories list page, the [Sort A-Z] button is visible
  3. Change the Variable setting to "N" by clicking on the Variable's Edit icon
  4. The [Sort A=Z] button is not displayed on the Categories List Page.

This feature protects the work of an Admin or PU who has applied a custom sort to the Category List Page.

 

3. Permissions for Subcategories

Homepage > Content > Categories > list page

  1. Parent
  2. Parent > Child > Grandchild hierarchy

The general rules of Category Security when it had one or more vertical levels of parentage; i.e., hierarchy,  are  as follows:

  • Category View Access Permissions may be given to a Group or individual Regular or Power User
  • If Edit Access is granted, it applies only to Power Users
  • Permissions may be granted to any Category within the hierarchy
    • If a User is granted access to a Parent Category at any level within the tree structure, that user  automatically receives corresponding Access to children at all lower levels
      • In the example image above,  a user granted Access to:
        • The Sales & Marketing Category receives it for ALL members of the hierarchy
        • The Sales Ops Category receives it for its children:  Account, Geo and Region
    • Access applies horizontally; i.e., to all children of the selected Parent
    • Access does not apply upward, only downward vertically
    • Data Source Use Access for elements within the parent Category  is granted to an individual PU for the Parent's elements but NOT for elements belonging to the associated Child Categories
      • No element Data Source access is granted to Group member Power Users when Category Access is granted.
    • Neither Groups nor individual users are granted any associated component element or Dimension access
      • These must be granted manually in order to ensure a user can open the elements or Datasets within a Category.
    • No Dataset or UM Data Source access is given to the Group or individual user when they are granted Category Access.