Presentation Object Grants

Presentation Object Grants is a form used mainly when managing the security content for several Permission Sets.
You can in this form grant and revoke Presentation Objects to one or many Permission Sets and also view which Permission Sets and which Users that are granted a specific Presentation Object.

Contents

• Presentation Object Grants
• View which Permission Sets that grants access to a Presentation Object
• Manage Permission Sets grants
• View which Users that have access to a Presentation Object

Presentation Object Grants

The Presentation Object Grants window is found in Solution Manager/Permission Sets/Presentation Object Grants navigator folder. The window has two different view modes. One is a standard List and one is a tree where the Presentation Objects are arranged as in the Enterprise Explorer navigator. You can switch between the view modes using the context menu. When opening this window the next time the same view mode as used last time will be shown. The right side where you can view which Permission Sets and Users that grants a Presentation Object works in the same way in both view modes.

List View Mode

When opening the form you get a search box where you fill in the conditions to find the Presentations Objects you want to view or manage. This view mode is useful when you know what Presentation Objects you are looking for or you want to manage Presentation Objects that has changed after an upgrade.

Description of the fields

Actions

Reset:

This action will clear Change Date and the Change Information. This is typically done after having verified that the Permission Sets contains the correct grants for the changed Presentation Objects. You can select to reset this information for the selected Presentation Objects or for all Presentation Objects in a component (the component for the selected Presentation Object) or for all Presentation Objects. Read more in Upgrade Permission Sets how the change information is used when upgrading Permission Sets.

Show Database Objects:

This will turn on or off the Database Objects pane that shows the connected database objects for the selected presentation object.

By Navigator View Mode

This view mode shows the presentation objects for windows that can can be accessed from the Navigator.

View which Permission Sets that grants access to a Presentation Object

When selecting one Presentation Object, the two lists in the Permission Sets tab page to the right are updated. The top list shows the Permission Sets that grants access to the selected Presentation Object. The list below shows Permission Sets not granting the selected Presentation Object.

Manage Permission Sets grants

Using the grant / grant query and revoke menu options in the Permission Set lists you can modify one or several Permission Sets by giving or revoking access to the selected Presentation Objects. 

Grant one Presentation Object to one or many Permission Sets

1. Select a Presentation Object.
2. In the list of Permission Sets not granting this Presentation Objects, select a set of Permission Sets that should grant access to this Presentation Object.
3. Right-click and select Grant or Grant Query

The Grant option is also available in the list of granted Permission Sets if the Permission Set only is partially granted this Presentation Object.

Revoke one Presentation Object for one or many Permission Sets

1. Select a Presentation Object.
2. In the list of Permission Sets granting this Presentation Object, select a set of Permission Sets where access to this Presentation Object should be revoked.
3. Right-click and select Revoke

Note: When a Presentation Object is referred to from many places, granting/revoking it from one place will affect all places.

Grant/Revoke several Presentation Objects to one or many Permission Sets

When several Presentation Objects are selected, or a folder is selected when using the By Navigator view mode, all Permission Sets are shown in the bottom list. In this list both grant / grant query and revoke is available. Selecting one of these menu options will perform the operation for all the selected Presentation Objects to all selected Permission Sets.

Note: When granting a Presentation Object to a permission set, it will also grant the Global Presentation Object of the component which it belongs to. When revoking a presentation object, all dependent presentation objects for that presentation object will be revoked if they are not used by another granted presentation object. But Global presentation object will not be revoked.

View which Users that have access to a Presentation Object

When selecting one Presentation Object, the list of Users in the Users tab page to the right is updated. This list shows the users which have access to the selected Presentation Object. You can view the details for users by selecting one or many users, right-click and select Show Details. To view the security summary for a user select one user, right-click and select View Security Summary for User.

Note: You cannot grant or revoke a Presentation Object directly to a user. Grants are given to Users by connecting them to Permission Sets in User Administration or in Grant Permission Set to User window

View what Permission Sets that gives a User access to a Presentation Object

When a user is shown in the list it means that the user has access to the selected Presentation Object. The access is given by one or many of the Permission Sets that is given to the user. When selecting a user you can see which Permission Sets given to the user that gives access to the Presentation Object. These Permission Sets are shown in a list at the bottom of the user list. The "check mark" on the security icon indicates that the Permission Set is of type "End User Role" and is thus granted directly to the user. You can go to the Permission Set detail form by double-clicking on the Permission Set.

Change User Access to a Presentation Object

To restrict a user from having access to a particular Presentation Object you can do one of the following:

1. Revoke this Permission Set for the User in User Administration or in Grant Permission Set to User. Note that revoking a Permission Set for a user may also revoke access to other Presentation Objects for the user since it is likely that the Permission Set contains access to more Presentation Objects than just the one you wanted you wanted to restrict access to.
2. Modify the Permission Set so it does not grant access to the Presentation Object. Select the Permission Sets tab page and select these Permission Sets. Right-click and select Revoke. Note this may affect other users that also are given this Permission Set and thus restrict them from accessing this Presentation Object.
3. Create a new Permission Set that is more suitable for this user in the Permission Set window. Revoke the previous Permission Set for the user and give access to the new Permission Set instead. 

To give a user access to a particular Presentation Object you can do one of the following:

1. Give the user access to a Permission Set that grants this Presentation Object in User Administration or in Grant Permission Set to User. Note this may give access to more Presentation objects since it is likely that the Permission Set contains access to more Presentation Objects than just the one you wanted you wanted to give access to.
2. Update one of the existing Permission Sets that the user have so it grants access to this Presentation Object. Note this may affect other users that also are given this Permission Set and thus give them access to this Presentation Object as well.
3. Create a new Permission Set that is more suitable for this user in the Permission Set window and give the user access to this one.