Skip to main content
S
sdrzewiczewski10-Marble
10-Marble
November 15, 2012
Question

Search Results Question

  • November 15, 2012
  • 5 replies
  • 972 views

A user posed a question to me today, and i'm paraphrasing:


"When i search on a document, i want to know if it exists even if i don't have access to that container"


Is this something that other companies have a need to do? If so have you solved it?


Thanks,
Steve D.

5 replies

S
SteveVinyard1-Visitor
1-Visitor
November 15, 2012
Perhaps an "Document Existence Report" that uses the ByPass Access Control would work for this. I have seen situations where people would like this. If its needed you could perhaps setup a Read-Only role for all Contexts that only allows reading but no download or anything else.

[cid:image001.gif@01CDC31C.840393E0]

Steve Vinyard
Application Engineer
V
VenkataKotra1-Visitor
1-Visitor
November 15, 2012
Yes..we have the same scenario and we were able to do it through Access Control Privileges.
User can search the object and context name is not shown and shows as (Secured Information).
which means user doesn't have access to container but he can check and see if it exists in the system.

regards
Venkata Kotra║Sr.Analyst, Engg Systems ║IS, HHI
[cid:image001.png@01CDC31C.E82B12D0]
S
sdrzewiczewski10-MarbleAuthor
10-Marble
November 15, 2012
Was this done by granting read access to the objects at the Org level? I was thinking about this as a possible option.
V
VenkataKotra1-Visitor
1-Visitor
November 15, 2012
Yes..You are right..we only had read access to 'Production' released objects .

regards
Venkata Kotra║Sr.Analyst, Engg Systems ║IS, HHI
[cid:image001.png@01CDC31D.92852680]
A
AL_ANDERSON12-Amethyst
12-Amethyst
November 15, 2012
We actually treat our meta data as less necessary to secure than our file
content. All of our internal users can see all object metadata (name,
number, description), but the ability to download content is more tightly
managed and audited. External users (ProjectLink users not in our
company), cannot see anything, not even meta data, for any objects outside
of only the projects they are a member of.

This way, people see what is there and where it is, but they have to get
download access to view the content if, in fact, they want to view the
content of something they cannot download. Obviously this approach won't
work in a defense or "secret" type of organization where you cannot even
let a person know something exists if they don't have a need to know, but
we are not in that kind of environment.

It is a nice feature that "download" is controlled separately from "read."

Al Anderson






Terms & ConditionsAccessibility statement