Bosch BIS 2.3 Installation Manual page 55

BIS 2.3 - Access Engine
profiles. The rights in user profiles are cumulative, and the
rights in workstation profiles are also cumulative. However
when a user sits at a workstation he has only those of his user
rights which are also allowed by the workstation's profiles. i.e.
only the intersection of the two rights packages.
NOTICE!
i
If the two rights packages do not overlap at all then, even if a
user has the right to log on to a particular workstation, s/he will
not see any dialogs or applications, and hence cannot use them.
Regarding the examples above the following peculiarities
should be noted:
WP-Administrator: Both this workstation profile and its
assigned user profile (= UP-Administrator) contain the
execution rights for all dialogs and applications in Access
Engine. A user who has been assigned the UP-Administrator
profile can therefore execute all dialogs and applications fully
on each workstation with the WP-Administrator profile.
WP-Server: All user profiles can be assigned to this workstation
profile. However, the user of the UP-Administrator profile only
receives full execution rights if the WP-Server profile also
enables all dialogs and applications. All other user profiles (B to
D) can use only those dialogs for which they are authorized,
provided that the WP-Server profile does not have any
additional restrictions.
NOTICE!
In practice, restrictions regarding the execution of dialogs and
applications are generally controlled using specific user
i
profiles.
In this case, the WP-Server profile is installed with all rights and
is assigned to all workstations. Every user has their full range of
dialogs on any workstation that they can log onto.
Bosch Sicherheitssysteme GmbH Installation manual
User administration | en
F.01U.028.713 | V 2.3.0.1 | 2009.11
55