Revision Date: 2005-11-07
Problem:
You need to give some users the ability to view existing CHARTrunner chart definitions but not be able to modify the chart definitions. You may also need to give other users the ability to both view and modify the chart definitions. In addition, you may need to control who can make changes to chart style definition files.
Solution:
CHARTrunner chart definitions and styles are stored as text files and access to these files can be controlled by using "Operating System Access Control" as described below.
A CHARTrunner chart definition is stored as a ChartName.CRF file, a Multi-Chart definition is stored as a ChartName.CRM file, and a Workspace definition is stored as a ChartName.CRW file. A chart style definition is stored as a StyleName.CST file.
If you want a user or group of users to only be able to view charts and not change the chart definition then grant that user or group only Read access to the chart definition file. Grant both Read and Write access to users or groups that need to make changes to a chart definition file.
When a chart display window is closed CHARTrunner attempts to store the window size and position information back into the ChartName.CRF file. If the user only has Read access to the chart definition file then the size and position information will not be stored.
Chart styles are usually read from the SysData folder on the local computer where CHARTrunner is installed. If you want to ensure that chart definitions on a network share use a specific style definition (rather than the style definition of that name found on the local computer) then put the style file in the same folder as the chart definition.
If you want a user or group of users to only be able to use styles placed in a network folder and not change the style definition then only grant that user or group Read access to the style file. Grant both Read and Write access to users or groups that need to make changes to a style file.
Using Operating System Access Control
On a Windows computer, an NTFS-formatted hard disk must be used in order to assign access control permissions to individual files or folders. The NTFS file system is available on Windows NT, 2000, XP and 2003 (or higher) operating systems; it is not available on Windows 9X and ME. If the hard disk is formatted using the FAT or FAT32 file system then you will only be able to assign access control permissions to shared folders, i.e. "Share Level" permissions.
To set access permissions for a folder located on an NTFS-formatted hard disk, right-click the folder, click Properties on the shortcut menu, and then click Permissions on the Security tab. You can share the folder on a network by using the settings on the Sharing tab. Typically you leave the Permissions settings on the Sharing tab (Share Level permissions) at their default , e.g. "Everyone Full Control", and make final permission settings by using the Permissions button on the Security tab (NTFS Level permissions). This is because the user's effective permission is the most restrictive one from the "Share Level" and "NTFS Level" permissions.
To set access permissions for an individual file located on an NTFS-formatted hard disk, right-click the file, click Properties on the shortcut menu, and then click Permissions on the Security tab.
Access control permissions can be assigned either to a specific file, or to a folder so that the permissions apply to all the files and sub-folders of that folder via inherited permissions. Refer to your operating system documentation for more information on inherited permissions.
Windows 95, Windows 98 and Windows ME
You can control access to folders that are shared across a peer-to-peer or server-based network in Windows 9X and Windows ME. Before you can do this you must use the Network icon in Control Panel to enable file sharing by clicking the File and Print Sharing button on the Configuration tab. You can use options on the Access Control tab to determine whether to use share-level (password) or user-level (users and groups) access control for shared folders. The user-level access control option is available only if the computer is connected to a network server where user accounts reside, such as a Windows NT (or higher) domain controller. In Windows 9X and ME, there is no way to control access to folders on local drives that are shared by multiple users logging on to the same computer by using different user account names.
To set access permissions for a folder shared across a network in Windows 9X or ME, right-click the folder in Windows Explorer or My Computer, and then click Sharing on the shortcut menu. Click Shared As, and then define access permissions for the shared folder and all its child folders and files.
Novell Netware
Other network operating systems, such as Novell NetWare, provide similar features to control access to files. For information about how to control access to files with these network operating systems, refer to the documentation for these products or visit http://www.novell.com.
More Information
More information about using "Share Level" and "NTFS Level" access permissions for Windows can be found on the Microsoft web site, such as here:
