User Access Control Overview
User access to features and objects within Horizons is controlled by two mechanisms:
- Product licences—a Horizons user has licences for various Horizons modules.
- User Access Control (UAC)—if User Access Control is enabled, a user may be a member of one or more User Groups with permissions controlling access to features and objects.
User Access Control adds more detailed access control than licensing modules.
- Horizons features that may be subject to User Access Control include data import and some Analysis features, as well as specific features such as editing and renaming.
- Horizons objects that may be subject to access control include Layers, Layer folders, data sources (graphing and item sources), Treatment Sets, and Work Plans.
- Horizons modules that may be subject to license or User Access Control are the Explorer, Reporting, Management, and Analysis modules.
The following object types can be controlled by User Access Control:
- Features
- Layers
- Layer Folders
- Data Sources (the underlying data for all Layers, graphs, exports etc.)
- Treatment Sets
- Works Plans
Under User Access Control, all the above objects that are created by a user are considered owned by that user and are initially private to that user. Private objects are only viewable by the owning user or by an Administrator. An object owner has full control over the objects that they create. They can rename, edit, and delete them as required. The owner can edit and delete Layers, import data, and run Works Plans while keeping these objects private. Then they can share them with a user group once they are ready. Users can also make objects private again for re-work as required.
An object owner (or Administrator) can share any object that they own with another User Group that they are a member of. Another member of the group can then share with a group that they belong to. The object owner (or Administrator) can also un-share with any group. This brings the object back to private ownership.