Anyone using Security Labels?

[estewart-2]

Just a quick question.

We are considering using security labels to help control ITAR and CGP (Canadian equivalent) in our database. Has anyone else used, or looked atthese, and any pearls of wisdom you'd like to share?

Eugene Stewart

Com Dev Ltd

Windchill 9.1 M050

[ptc-149761]

I've done a great deal of work with this feature. It is very complex and hard to keep track of what you are doing. Requires a great deal of user training. (You have to give the external user read access (at least) to the domain, so if the creator doesn't set the correct security label to hide it, you could easily give access to data that you shouldn't.) The other problem is the access rights to over-ride the label. It gives more admin. rights than you might want.

Regards,
Michael Holifield

[SimonLucas]

Hi, did some work on this for our secure system. One issue we found was it was not possible (as far as we could tell) to display the security label value on the objects info page, or in table views, so people with access to objects could not easily see what controls were in place.The only way you could see it was to use 'manage security' on the object.

In the end as we did not need the 'access' control side at this point, we opted for soft atributes for the protectove marking, These could then be shown directly on the objects info page, in table views and also on drawings.

Setting up the securoty labels certainly takes a lot of thought up-front.

Simon Lucas