Spotfire® Server and Environment - Installation and Administration

Library permissions

Permissions in the Spotfire library are always specified on a folder-level, never on analyses or other library items directly. If you have full control of a folder, you can edit folder permissions for that folder from the details view for the folder in the library.

The following levels of permissions can be specified for a folder in the library:

  • Access - The user or group is allowed to execute information links that are placed in the folder, but is not allowed to browse the contents or open analysis files.
  • Browse (+ Access) - The user or group is allowed to access and browse the folder contents. The user can open and use items found in such folders, but not save or modify them. Note that subfolders can only be shown if the user has "Browse (+ Access)" for the parent folder as well as for the subfolder itself. Folders where users do not have "Browse (+ Access)" will not be seen even if they are inside a folder the users have access to.
  • Modify (+ Browse + Access) - The user or group is allowed to browse and access the contents of the folder and also modify items or save new items. The user can also create new subfolders.
  • Full control - The user or group is allowed to access and browse the folder, modify and save items, and also change permissions for the folder and its contents.
Note: To delete, move, or edit an item from the library web view, the user or group must also have the Spotfire Business Author > Spotfire Business Author license feature.

The Library Administrator group

The Library Administrator group is always present in the Spotfire system. Members of this group will override any permission levels in the library, and have full control of the entire library. By default, members of this group are also the only ones allowed to create, delete and change permissions for top level folders.

Inheritance

By default, a subfolder inherits the permissions of its parent folder. This is true for entire chains of subfolders in the library. However, if you have Full control of a folder, you can edit the permissions for it and specify the exact permissions that you want it to have. When explicit permissions are specified for a folder, the inheritance from the parent folder (or any folder higher up in the hierarchy) is completely severed.

Important: If a user should be allowed to browse the contents of a specific subfolder, the user must also have Browse (+ Access) permission for the parent folder, and its parent folder, and so on, all the way to the top level of the library. If the Browse (+ Access) permission is removed for a folder in the hierarchy, the user cannot browse to any folders further down that folder structure regardless of the permissions specified for the folders within it.