25Live Security Overview : Object security and assignment policy interdependencies
  
Object security and assignment policy interdependencies
To be able to request assignment of a particular location or resource for events, a security group’s Events object security permission to the location or resource must be “Assign/Request” and their assignment policy permission must be “Request” or “Request/Unassign.”
To be able to assign a particular location or resource to events, a security group’s Events object security permission to the location or resource must be “Assign/Request” and their assignment policy permission must at minimum be “Assign/Unassign.”
To be able to act on assignment requests from other users, a security group’s Events object security to the location or resource must be “Assign/Request” and their assignment policy permission must be “Assign/Unassign/Approve.”
Request/Approve example
Scenario
Mary is a scheduler in the Athletics Office. She’s a member of the Athletics Office security group. As defined by the group’s location assignment policies and object security, Mary can use 25Live to:
Create events in her own Athletic folder in the Special Events cabinet and view (but not change) events in the rest of the cabinet.
Assign all athletic locations to events.
See what events are happening in all the other locations on campus, but not assign any of those locations to events.
Mary is occasionally asked by the Athletic Department staff to schedule a meeting in MEETROOM, one of the campus meeting rooms. Mary can’t assign MEETROOM, but she can create an event and initiate an assignment request for it. That assignment request is sent to Jane.
Jane is the secretary to the president and controls all of the meeting rooms in the administration building, including MEETROOM. She’s a member of the President’s Office security group. As defined by the group’s location assignment policies and object security, Jane can use 25Live to:
Create events in the President’s Office folder in the Special Events cabinet and view (but not edit) events in the rest of the cabinet.
Assign MEETROOM and all other locations in the administration building to events.
Jane occasionally receives assignment requests for MEETROOM from Mary via her 25Live Task List. Jane decides whether or not to assign MEETROOM to Mary’s events. When she assigns it or denies the request, Mary sees that in her own 25Live Task List.
Minimum functional security required
The following table shows the minimum functional security that must be in place for Mary to be able to create an event, check the availability of MEETROOM, and have the assignment request sent to Jane, and for Jane to complete the request (either assign MEETROOM or deny the request).
Functional Security Permission
Athletics Office (Mary’s) Access
President’s Office (Jane’s) Access
Events: Event Wizard
Can use 25Live Event Wizard to create and edit events
Can use 25Live Event Wizard to create and edit events
Events: Events
Can view, edit, create, and copy
Can view, edit, create, and copy
Events: Location Assignments
Can view location assignments and preferences
Can assign and/or request locations in the Event Wizard
Tasks, Reports, and Email: Task List
Can view and act on task items
Can view and act on task items
Locations: Location Access
Can view, Locations tab appears in 25Live
Can view, Locations tab appears in 25Live
Object security on MEETROOM
Both Mary and Jane must be able to see MEETROOM (controlled by Object object security) and run an availability check on MEETROOM (controlled by Events object security).
Object Security Permission
Athletics Office (Mary’s) Access
President’s Office (Jane’s) Access
Object
View Only
Edit, Delete, Copy
Events
Assign/Request
Assign/Request
Location Assignment Policy for MEETROOM
Mary can’t assign MEETROOM to events, but she can request its assignment. Jane can respond to assignment re quests for MEETROOM and assign it to events.
Athletics Office (Mary’s) Access
President’s Office (Jane’s) Access
Request
Assign/Unassign/Approve
Object security on the Athletics Office folder and the events in it
Mary must be able to create events in the Athletics Office folder. Jane must, at minimum, be able to see those events so she can assign requested locations to them.
Object Security Permission
Athletics Office (Mary’s) Access
President’s Office (Jane’s) Access
Object Rights
View Only
View Only
Create Events?
Yes
No
New Event Rights
Edit, Delete, Copy
View Only