Chapter 5 Administrating Repository Users

Understanding User Rights in the Repository

Each repository user has a set of rights that govern any kind of interaction with the database.

A repository administrator is responsible for granting the rights to the repository users and groups. The same types of rights can be assigned to groups and users.

The user rights are the following:

Right	Description
Connect	User is allowed to connect to the repository
Freeze Versions	User is allowed to freeze document versions
Lock Versions	User is allowed to lock document versions
Manage Branches	User is allowed to create, modify, and delete branches
Manage Configurations	User is allowed to create, modify, and delete configurations
Manage All Documents	User is allowed to create, consolidate, extract, unlock, unfreeze, define permissions and delete any document version
Manage Users	User is allowed to create, modify and delete repository users and groups, to grant rights to users and groups and to add users or groups to a group
Manage Repository	User is allowed to upgrade a repository and to drop the repository database

The user rights can be combined to create different kinds of user profiles.

For more information on how to assign rights to a user, see section Defining the rights of a user.

Example

The following table shows typical project profiles. Note the difference between data administrator who manages data in the repository, and repository administrator who manages the repository and the users.

User profile	Required user rights
Database Administrator	Connect Manage Repository Manage Users
Data Administrator	Connect Manage All Documents
Team Leader	Connect Lock Versions Freeze Versions Manage Branches Manage Configurations
Designer	Connect Lock Versions Freeze Versions

Rights and permissions

User rights can be associated with permissions on documents to define the actions a user can effectively perform on a document.

Some user rights are automatically associated with permissions for consistency reasons:

Lock and Freeze Versions are associated with the Write permission.
A user with the Lock or Freeze Versions right must have a Write permission on the repository document.
A user with the Full permission on a document can unlock or unfreeze a version he did not lock or freeze.

For more information on document permissions, see section Defining access permissions on the repository content in the chapter Managing Repository Documents.