IDOL 24.2

# Mapped Security

In the Mapped Security architecture, IDOL determines whether a user is permitted to view a document by comparing the user's security details against an Access Control List (ACL) that has been added to the document.

With Mapped Security, when connectors fetch information from data repositories they add an encrypted Access Control List (ACL) to a metadata field in each document. The ACL contains information about which users and groups are permitted to access the document. The documents, and therefore the ACLs, are indexed into the IDOL Content component.

A user might be allowed or denied permission to view a document because they are a member of a security group. This means that IDOL must consider group memberships, in addition to permissions, before it can determine whether a user can view a document. OmniGroupServer collects user and group information, and stores it, so that the IDOL Community component can access this information.

When a user queries the IDOL Content component index, Content sends the user's security string and the documents that match the query to the Mapped Security Plug-In. The Mapped Security Plug-In compares the user's details to the ACL in each document, and determines which documents the user is permitted to view. Content only returns those documents in its response.

The advantage of this process is that Content can quickly respond to a query, because it does not need to connect to the original data repository to check the ACL for each document. The disadvantage is that there might be a delay between the security settings changing in the original data repository and the information being updated in the IDOL index.

Mapped Security is suitable for most environments, particularly where the security settings for documents do not change often.

Copyright 2024 Open Text
Version 24.2 | Last updated March 2024

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: IDOL 24.2

Topic Title: Mapped Security