Enable Security at List Level by Customizing the Security Group Definition

List Level Customization

The security group definition available at the repository level can be customized at the list level by copying all the security groups available at the repository level to the list level.

You can change the definition available for a security group and customize the security group definitions at the list level and various item levels.

Note: Do not update the security definition at levels if it is explicitly customized at those levels.

Security Group Customization

Example: The example shows you how to customize the security group definition at list level. The Contributor security group at the repository level is customized at the List level (here, Workflow list item is considered). Considered that the contributor user is able to create an item, folder and delete an item at the repository level. But the contributor user cannot create an item or folder and delete an item only at the workflow list level.

1. Log on as a user who belongs to the Contributor security group.

2. In the Enterprise Console, click the Menu button, and then click Workflows. The Workflows page appears.

3. Before security settings, the contributor is able to create an item or folder or delete an item by using the options available in New Workflow > New Folder and Actions > Delete in the ribbon bar.

4. To customize this security group definition at the Workflows list level, log on as the administrator user.

5. Click Repository Settings. The Repository Settings page appears.

6. Click Standard Settings tab, and then click View Security Mapping at Repository Level. The View Security Mapping at Repository Level page appears. This page shows the mapping at the repository level before enabling security at the list level.

7. Click the Contributor security group name to view the rights mapped to the security group at the repository level.
   In the Enterprise Console, click the Menu button, and then click Workflows. The Workflows page appears.

8. On the Action bar, click Security.

9. Click Advanced Settings tab.

10. Click Enable List Specific Security. The Enable Security Wizard page appears.

11. Check Security Group Customization.

12. Click Next.

13. Click Next to continue. The Workflows page displays the Security Group information.

14. Select the Contributor security group name, and click Edit on the action bar. The Modify a Security Group page appears.
    Alternatively, select and right-click the Contributor security group name, and then click Edit from the context menu to customize the security definition.

15. Based on the requirement, uncheck Can Create Item, Can Create Folder, and Disallow Can Delete Item. 
     

16. Click Save. The Synchronizing the Security Group dialog box appears.

17. Choose Yes to apply the changes to all its later levels, else click Cancel.

18. Click Submit. The Security Group is modified successfully message appears.

19. Click OK.

20. Click the Contributor security group to view the rights mapped to the security group at the list level.

21. Click View to check the security rights of the user. The View Security Group Rights page appears. 

22. Log on as the Contributor user.

23. In the Enterprise Console, click the Menu button, and then click Workflows. The Workflows page appears.

Now if the Contributor user tries to create an item or folder, or delete an item, the following warning message appears as the Contributor security group is customized only at the Workflow list level.

You do not have rights to perform this action.

The Workflows list has its own security.

You can enable Resource Mapping and customize the security group at the same time.

The LastUpdatedDateTime column in the Security Group list displays the modified date and time of a particular security group, only when it is updated at the Repository level.