The default domain of private products, libraries, projects, and programs also inherit these rules. PTC recommends that no additional access control rules be created within this domain.
•/System – Typically, only administrative objects (such as document templates, team templates, and life cycle templates) are in this domain.
To update the access control rules for an organization domain within the Policy Administration utility, select a domain and click Update. From the Administrative Domain window, click the Access Control tab. This provides the list of existing access control rules for this domain. From this tab, you can modify or delete existing rules and create new rules. When creating or updating rules, the list of user-defined groups available from the Groups tab include groups defined at the site and organization levels. For more information, see Searching for Participants in Administrative Clients on page 255 .
Access Control Rules
Out-of-the-box access control rules are described in the following sections.
Default Domain Rules
The following table lists the combination of object type, life cycle state, and permissions that the Default domain out-of-the-box rules define for the organization. Most permissions are granted to the listed participant.
Object Type |
State |
Permissions |
Participant |
Meeting |
All |
Read |
All Participating |
|
|
|
Members |
Meeting |
All |
Read |
This Org |
NavigationFilterTem- |
All |
Full Control |
Filter Template Creator |
plate |
|
(All) |
|
NavigationFilterTem- |
All |
Read |
This Org |
plate |
|
|
|
WTObject |
All |
Full Control |
ORG ADMIN |
|
|
(All) |
(Organization |
|
|
|
Administrator group) |
AbstractWorkPackage |
All |
Read, Create, |
PACKAGE CREATOR |
|
|
and Download |
(Package Creator |
|
|
|
dynamic role) |
AbstractWorkPackage |
In Work |
Modify and |
PACKAGE CREATOR |
|
|
Modify Content |
|
AbstractWorkPackage |
Ap- |
Revise and |
PACKAGE CREATOR |
|
proved |
Modify |
|
AbstractWorkPackage |
Released |
Modify and |
PACKAGE CREATOR |
|
|
Revise |
|
154 |
PTC Windchill® Basic Administration Guide |
Object Type |
State |
Permissions |
Participant |
AbstractWorkPackage |
Complet- |
Modify, Revise, |
PACKAGE CREATOR |
|
ed |
and Modify |
|
|
|
Content |
PACKAGE CREATOR |
AbstractWorkPackage |
Rework |
Revise, Modify, |
|
|
|
and Modify |
|
|
|
Content |
|
ManagedCollectionImpl |
All |
Create, Create |
PACKAGE CREATOR |
|
|
By Move, |
|
|
|
Read, and |
|
|
|
Modify |
|
DeliveryRecord |
All |
Create, Read, |
PACKAGE CREATOR |
|
|
Modify, Modify |
|
|
|
Content, |
|
|
|
Download, and |
|
|
|
Change |
|
|
|
Permissions |
REPLICATION |
DeliveryRecord |
All |
Create, Read, |
|
|
|
Modify, Modify |
PACKAGE |
|
|
Content, |
ADMINISTRATOR |
|
|
Download, and |
|
|
|
Change |
|
|
|
Permissions |
PACKAGE CREATOR |
ExportRecord |
All |
Create, Read, |
|
|
|
Modify, and |
|
|
|
Delete |
REPLICATION |
ExportRecord |
All |
Create, Read, |
|
|
|
Modify, and |
PACKAGE |
|
|
Delete |
ADMINISTRATORS |
ReceivedDelivery |
All |
Create, Read, |
RECEIVED DELIVERY |
|
|
Modify, Modify |
MANAGER |
|
|
Content, |
|
|
|
Download, Set |
|
|
|
State, Delete, |
|
|
|
Change |
|
|
|
Permissions, |
|
|
|
Administrative |
REPLICATION |
ReplicationPackage |
All |
Create, Read, |
|
|
|
and Download |
PACKAGE |
|
|
|
ADMINISTRATORS |
ReplicationPackage |
In Work |
Modify, Modify |
REPLICATION |
|
|
Content, |
PACKAGE |
|
|
Modify |
ADMINISTRATORS |
|
|
Identity, |
|
|
|
Administrative, |
|
Understanding Organizations |
155 |
Object Type |
State |
Permissions |
Participant |
|
|
and Revise |
REPLICATION |
ReplicationPackage |
Released |
Modify |
|
|
|
Identity, |
PACKAGE |
|
|
Modify, |
ADMINISTRATORS |
|
|
Administrative, |
|
|
|
and Revise |
REPLICATION |
ReplicationPackage |
All |
All1 |
|
|
|
|
PACKAGE |
|
|
|
ADMINISTRATORS2 |
1.This permission is Absolutely Denied to the specified participant. All other permissions listed in this table are Granted to the specified participant.
2.This permission is applied to all participants who are not part of the Replication Package Administrators group.
System Domain Rules
The following table lists the combination of object type, life cycle state, and granted permissions that the System domain out-of-the-box rules define for the organization.
Object Type |
State |
Permissions |
Participant |
WTObject |
All |
Full Control |
ORG ADMIN |
|
|
(All) |
|
WTDocument |
All |
Read and |
All Participating |
WTPart |
|
Download |
Members |
All |
Read and |
All Participating |
|
|
|
Download |
Members |
FilteredDynamic |
All |
Read |
All Participating |
EnumSet |
|
|
Members |
Notebook Template |
All |
Read |
All Participating |
|
|
|
Members |
Notebook Template |
All |
Read |
This Org |
Cabinet |
All |
Read |
All Participating |
|
|
|
Members |
SubFolder |
All |
Read |
All Participating |
|
|
|
Members |
TeamTemplate |
All |
Read |
All Participating |
|
|
|
Members |
WfTemplateObject |
All |
Read |
All Participating |
|
|
|
Members |
LifeCycleTemplate |
All |
Read |
All Participating |
EPMDocument |
|
|
Members |
All |
Read and |
All Participating |
156 |
PTC Windchill® Basic Administration Guide |
Object Type |
State |
Permissions |
Participant |
|
|
Download |
Members |
Project2 |
All |
Create |
PROJECT CREATOR |
WTLibrary |
All |
Create |
LIBRARY CREATOR |
TypeBasedRule |
All |
Read |
All Participating |
|
|
|
Members |
PDMLinkProduct |
All |
Create |
PRODUCT CREATOR |
TableViewDescriptor |
All |
Read |
All Participating |
|
|
|
Members |
WTGroup |
All |
Read and |
SHARED TEAM |
|
|
Delete |
CREATOR |
ContainerTeam |
All |
Read |
PROJECT CREATOR |
ContainerTeam |
All |
Read, Modify, |
SHARED TEAM |
|
|
Create, and |
CREATOR |
|
|
Delete |
PRODUCT CREATOR |
ContainerTeam |
All |
Read |
|
ContainerTeam |
All |
Read |
LIBRARY CREATOR |
Report Template |
All |
Read |
All Participating |
|
|
|
Members |
WTPartAlternateRep |
All |
Read and |
All Participating |
|
|
Download |
Members |
ContainerTeam |
All |
Read |
PROGRAM CREATOR |
Project2 |
All |
Create |
PROGRAM CREATOR |
The following table lists the combination of object type, life cycle state, and granted permissions that the System domain out-of-the-box rules define for organizations created with the General organization template.
Object Type |
State |
Permissions |
Participant |
WTVariance |
All |
Read and |
All Participating |
|
|
Download |
Members |
WTChangeIssue |
All |
Read and |
All Participating |
|
|
Download |
Members |
WTChangeRequest2 |
All |
Read and |
All Participating |
|
|
Download |
Members |
WTChangeOrder2 |
All |
Read and |
All Participating |
|
|
Download |
Members |
WTChangeActivity2 |
All |
Read and |
All Participating |
|
|
Download |
Members |
Understanding Organizations |
157 |