Restricted Technical Specification Policy

This table defines the Restricted Technical Specification policy.

Restricted Technical Specification

Revision

A,B,C,...

Types

Technical Specification, Process Technical Specification, Raw Material Technical Specification, Packaging Technical Specification, Assembly Technical Specification, Formula Technical Specification

Hidden

FALSE

 

States

Draft

Peer Review

Formal Approval

Issued

Obsolete

Revisionable

TRUE

TRUE

TRUE

TRUE

TRUE

Versionable

TRUE

TRUE

TRUE

TRUE

TRUE

Auto Promote

FALSE

FALSE

FALSE

FALSE

FALSE

Checkout History

TRUE

TRUE

TRUE

TRUE

TRUE

Owner

read,modify,delete, checkout,checkin,lock, unlock,changeowner, schedule,override, enable,disable,create, revise,changevault, changename, changepolicy, changetype, fromconnect,toconnect, fromdisconnect, todisconnect,freeze, thaw,execute, modifyform,viewform, grant,revoke,show

read,checkout,checkin, lock,unlock,create, revise,fromconnect, toconnect, fromdisconnect, todisconnect,execute, show

read,checkout,create, revise,fromconnect, toconnect,todisconnect,execute,show

read,checkout,create, revise,toconnect, todisconnect,show

read,demote,toconnect, todisconnect,show

Public

none

none

none

none

none

Specification Manager

read,checkout,checkin, lock,unlock,create, fromconnect,toconnect, fromdisconnect, todisconnect,execute, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, toconnect, fromdisconnect, todisconnect,show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, toconnect,todisconnect, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,create,toconnect, todisconnect,execute, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,toconnect, todisconnect,execute, show

Specification Restricted User

read,checkout,checkin, lock,unlock,create, fromconnect,toconnect, fromdisconnect, todisconnect,execute, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, toconnect, fromdisconnect, todisconnect,show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, toconnect,todisconnect, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, toconnect,todisconnect,execute,show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,toconnect, todisconnect,execute, show

Specification Office Manager

read,modify,checkout, checkin,lock,unlock, changeowner,schedule, override,enable,disable,create,revise, changevault, changename, changepolicy, changetype,fromconnect,toconnect, fromdisconnect, todisconnect,freeze, thaw,execute, modifyform,viewform, grant,revoke, show

filter: context.user ~~ to[Assigned To Specification Office]. businessobject.from[Assigned Member]. businessobject.name

read,modify,checkout, checkin,lock,unlock, changeowner,promote, demote,schedule, override,enable,disable,create,revise, changevault, changename, changepolicy, changetype,fromconnect,toconnect, fromdisconnect, odisconnect,freeze,thaw,execute,modifyform, viewform,grant,revoke, show

filter: context.user ~~ to[Assigned To Specification Office]. businessobject.from[Assigned Member]. businessobject.name

read,modify,checkout, checkin,lock,unlock, changeowner,promote, demote,schedule, override,enable,disable,create,revise, changevault, changename, changepolicy, changetype,fromconnect,toconnect, fromdisconnect, todisconnect,freeze, thaw,execute, modifyform,viewform, grant,revoke,show

filter: context.user ~~ to[Assigned To Specification Office]. businessobject.from[Assigned Member]. businessobject.name

read,changeowner, create,revise, changename,changetype,toconnect,todisconnect,show

filter: context.user ~~ to[Assigned To Specification Office]. businessobject.from[Assigned Member]. businessobject.name

read,checkout,checkin, lock,unlock, changeowner,demote, changename, fromconnect,toconnect, fromdisconnect, todisconnect,show

filter: context.user ~~ to[Assigned To Specification Office]. businessobject.from[Assigned Member]. businessobject.name

Global User

read,modify,checkout, checkin,lock,unlock changeowner,schedule, override,enable,disable,create,revise, changevault, changename ,changepolicy, changetype,fromconnect,toconnect, fromdisconnect, todisconnect,freeze, thaw,execute, modifyform,viewform, grant,revoke, show

filter: (context.user ~~ to[CoOwned].businessobject.to[CoOwns].businessobject.name) && (attribute[Security Classification] != 'Highly Restricted' || to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,revise,fromconnect,toconnect, fromdisconnect, todisconnect,execute,show

filter: (context.user ~~ to[CoOwned].businessobject.to[CoOwns].businessobject.name) && (attribute[Security Classification] != 'Highly Restricted' || to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, revise,fromconnect, toconnect,todisconnect,execute,show

filter: (context.user ~~ to[CoOwned].businessobject.to[CoOwns].businessobject.name) && (attribute[Security Classification] != 'Highly Restricted' || to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, revise,toconnect, todisconnect,show

filter: (context.user ~~ to[CoOwned].businessobject.to[CoOwns].businessobject.name) && (attribute[Security Classification] != 'Highly Restricted' || to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,modify,checkout, checkin,lock,unlock, changeowner,promote, demote,schedule, override,enable,disable,changevault, changename, changepolicy, changetype,fromconnect,fromdisconnect,freeze, thaw,modifyform, viewform,grant,revoke

filter: context.user ~~ to[CoOwned].businessobject.to[CoOwns].businessobject.name

Global Template Administrator

read,checkout,lock, unlock,create,toconnect,todisconnect,execute, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject.from[Business Unit Employee].businessobject.name ~~ context.user)

read,create,toconnect, todisconnect,execute, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject.from[Business Unit Employee].businessobject.name ~~ context.user)

read,create,toconnect, todisconnect,execute, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject.from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, toconnect,todisconnect,show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject.from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, toconnect,todisconnect,execute,show

Template Administrator

read,checkout,lock, unlock,create,toconnect,todisconnect,execute, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject .from[Business Unit Employee].businessobject.name ~~ context.user)

read,create,toconnect, todisconnect,execute, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. rom[Business Unit Employee].businessobject.name ~~ context.user)

read,create,toconnect, todisconnect,execute, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, toconnect,todisconnect, show

filter: attribute[Security Classification] != 'Highly Restricted' || (context.user.assignment ~~ 'Specification Restricted User' && to[Business Unit Owns].businessobject. from[Business Unit Employee].businessobject.name ~~ context.user)

read,checkout,create, toconnect,todisconnect, show

System Transition Manager

all

all

all

all

all

System Conversion Manager

all

all

all

all

all

Shadow Agent

all

all

all

all

all

Supplier

read,show

filter: context.user.name ~~ to[Recommended Suppliers].businessobject.from[Employee].businessobject.name

read,show

filter: context.user.name ~~ to[Recommended Suppliers].businessobject.from[Employee].businessobject.name

read,show

filter: context.user.name ~~ to[Recommended Suppliers].businessobject.from[Employee].businessobject.name

read,show

filter: context.user.name ~~ to[Recommended Suppliers].businessobject.from[Employee].businessobject.name

read,show

filter: context.user.name ~~ to[Recommended Suppliers].businessobject.from[Employee].businessobject.name

Specification User

none

none

none

read,checkout,show

none

Product Manager

fromconnect,toconnect,fromdisconnect, todisconnect

fromconnect,toconnect,fromdisconnect, todisconnect

fromconnect,toconnect,fromdisconnect, todisconnect

fromconnect,toconnect,fromdisconnect, todisconnect

none

System Engineer

fromconnect, fromdisconnect

fromconnect, fromdisconnect

fromconnect, fromdisconnect

fromconnect, fromdisconnect

none

Access Grantor

read,modify,delete, checkout,checkin,lock, unlock,revise, fromconnect,toconnect, fromdisconnect, todisconnect,grant, revoke,show

read,modify,delete, checkout,checkin,lock, unlock,revise, fromconnect,toconnect, fromdisconnect, todisconnect,grant, revoke,show

read,modify,delete, checkout,checkin,lock, unlock,revise, fromconnect,toconnect, fromdisconnect, todisconnect,grant, revoke,show

read,modify,delete, checkout,checkin,lock, unlock,revise, fromconnect,toconnect, fromdisconnect, todisconnect,grant, revoke,show

read,modify,delete, checkout,checkin,lock, unlock,revise, fromconnect,toconnect, fromdisconnect, todisconnect,grant, revoke,show

This policy contains an administrative property called PolicyClassification with the value Restricted.