Knowledge Discovery 25.1
Getting Started Guide

# Document Security

Document security ensures that users can access only those documents for which they have the necessary permissions.

When a user logs on to a front-end application and is authenticated successfully, the Community component returns an encrypted security string to the front-end application. This string identifies the user and contains information about their group memberships. The front-end application must include this security string in every subsequent query it sends to the Content component.

When a user submits a query, Content determines whether they are permitted to view a document by comparing their security details against an Access Control List (ACL) that has been added to the document. An ACL is added to each document because checking permissions with the original data repositories would introduce a significant delay between the query and Knowledge Discovery returning its response.

When connectors fetch information from data repositories they add an encrypted Access Control List (ACL) to a metadata field in each document. The ACL contains information about which users and groups are permitted to access the document. The documents, and therefore the ACLs, are indexed into the Content component.

A user might be allowed or denied permission to view a document because they are a member of a security group. This means that the Content component must consider group memberships, in addition to permissions, before it can determine whether a user can view a document. OmniGroupServer collects user and group information, and stores it, so that the Community component can access this information and include it in the security string.

Mapped Security is suitable for most environments, particularly where the security settings for documents do not change often. There can be a short delay between the security settings changing in the original data repository and the information being updated in the Knowledge Discovery index.

Copyright 2024 Open Text
Version 25.1 | Last updated January 2025

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery 25.1

Topic Title: Document Security