|
|
Decision Explorer® FAQs - Password Control
Can I control access rights to my models?
Decision Explorer® includes an "undocumented" feature that
allows you to control whether users who are given the model can create
or edit concepts and links. You can determine the state of the model when
it is first loaded, and give additional access rights by using a password
system.
The various levels of capability available are as follows:
| Supervisor |
The "Normal" mode used if you
don't take any action. Full access, able to fully edit the model,
and to change access control settings. |
| FullControl |
Able to fully edit the model and add/edit
users, but not change access control settings. |
| FullAccess |
Able to fully edit the model, but not change
access control settings. |
| DelPrev |
Able to add new concepts and links, and
to edit and delete concepts and links which were made in the current
or previous "session" (ie concepts that are listed by the
LN command). Thus concepts can be created and corrected, but "after
a while" they become unchangeable. |
| DelSession |
Able to add new concepts and links, and
to edit and delete concepts and links which were made in the current
"session" (ie concepts that were added since loading the
model). Thus concepts can be created and corrected, but once saved
(and closed) they are unchangeable. |
| AddPrev |
Able to add new concepts and links, and
to edit concepts and links which were made in the current or previous
"session" (ie concepts that are listed by the LN command).
Thus concepts can be created and corrected, but "after a while"
they become unchangeable. |
| AddSession |
Able to add new concepts and links, and
to edit concepts and links which were made in the current or previous
"session" (ie concepts that were added since loading the
model). Thus concepts can be created and corrected, but once entered
they are fixed. |
| ReadOnly |
Concepts and links can be fully viewed
and analysed, but nothing new can be added to the model. Note that
select boxes in this mode are always "solid", not dashed. |
| None |
No concepts or links can be seen. This
is primarily aimed at being the starting level, since a model with
this level of access is NOT secure. Anyone can see the actual text
using a file dump utility. |
A model always starts in supervisor mode, and any passwords specified
have no effect until a supervisor password is set using the setsuper
command.
A model can have two user passwords, each with a different access level.
This allows the supervisor to give different access to different groups
of users. For instance, the local facilitator can have FullAccess when
needed, but client users only have ReadOnly access.
Further, a model has a starting access level, allowing any level to be
active when it is first loaded. This allows a facilitator to set the model
in a suitable mode without the client user having to enter a password
(or even know a password is available).
The commands available are as follows: (<password> should be a
single word.)
| login <password> |
Compares the model passwords with that
specified, and sets the appropriate access level. This only has an
effect when access control is enabled. |
| newpass <password> <level>
[<which>] |
Changes one of the two passwords available
in the model. The <level> parameter should be one of the words
listed in the above table. If <which> is not specified, then
password 1 is set. Otherwise it should be 1 or 2. These may be set
before access control is enabled. Only available when currently at
supervisor level. |
| superpass <password> |
Enables access control, storing the <password>
to enable later modification of access levels. The model must be saved
for access control to be permanently stored. Only available when currently
at supervisor level. Do not forget this password! |
| stdlevel <level> |
Sets the standard access level, which is
set when an access controlled model is loaded. The <level> may
be any of the words listed above. Only available when currently at
supervisor level. |
| logout |
If access control is enabled, this command
sets the current level to the standard level. |
| nopassword |
Removes access controls from the model.
Only available when currently at supervisor level. |
Note: In the case of loss of passwords, particularly the supervisor password,
it will be necessary to return the model file to Banxia Software to be
changed. Contact info@banxia.com for details of the cost.
Can you show a typical session?
For an example, we will assume that we want to give a model to a group
of people. Most people are to be allowed to view the model to see what
the current thoughts are but they are not to be able to edit it. Some
of them (the editors) are to be allowed to edit it too, to add their thoughts.
We will allow them to edit only concepts they add in the same session
(since loading the model this time). We will enter the following commands
to prepare the model for use:
| stdlevel readonly |
Set the starting mode to be read-only. |
| newpass london delsession 1 |
Set up one of the passwords to be "london"
with the ability to create concepts and delete those entered in the
current session. (The other password is not set, so it will remain
dormant.) |
| superpass consult |
Set the supervisor password to "consult".
Do not forget this password! This activates the security
system, but you are still in supervisor mode. Use "Logout"
to test the model. |
The model can now be saved and put on the server for the group to use.
You will probably want to turn on the name facility, and auto-prompting,
so that sharing works better. When a user loads the model, it will be
in read-only mode, which is how we want most people to use it. When one
of the editors wishes to add to the model, they simply enter the password:
| login london |
Enter the password to be able to add to and edit the
model. (The actual rights are determined by the supervisor earlier. |
Concepts may now be entered and edited. When finished, simply close the
model - a specific logout is not needed unless you want to leave the model
with someone in read-only mode.
Logging in using the supervisor password will allow you to change any
aspect of the model. If you are at the computer of one of the group who
you are restricting, then you will want to use the logout facility to
return to the default mode (or login using another password).
How do I remove access control?
If you wish to remove password control from the model you must login
as the supervisor, and then use the nopassword command. Make sure you
save the model after doing this.
| login consult |
Log in as the supervisor |
| nopassword |
Remove access control |
Is password control secure?
This systems is designed to help people manage who can edit models co-operatively.
It is not designed to provide tough security, and it is not "bulletproof"
- an export user can work round some of the restrictions. It is however
a useful tool to help groups manage the workflow associated with models.
|
Home 
