Table of Contents
Advertisement
Aurora Edit Security
Aurora Edit Security Overview
Using SAN security, you can control the visibility and access for users and groups
within Aurora Edit bins by associating the bins and assets with le system permission.
SAN security uses the overlapping modes of inheritance, exclusivity, and group
membership, as implemented by Windows, to establish le system security.
These principals apply:
When you are joining computers to the domain or setting permissions, the NewsShare
system must be off line, during a maintenance window.
Designing a security schema
In order to set up security in your SAN system you need create a schema for
permissions. The schema determines which groups you create, and which permissions
you give each group.
Grass Valley has created a typical schema for use in illustrating security principles in
this document. You may use this schema if it is appropriate for your newsroom, or
create your own. For the examples in this manual, we ll assume that the newsroom
has ve groups: Editors, Producers, Archivists, Ingestors, and Viewers.
The SAN security principles are agnostic to these groups, though the use of groups
greatly simpli es the establishment of the security schema. We picked these names
as exemplary; you do not need to use them in your operation. You can have as many
or as few groups as you like, named however you wish. If your domain has a tree
hierarchy, you may assign permissions to global groups as well.
Sample security schema
The following table lists the groups and permissions being used as an example in this
document:
News Group
Domain
Administrator
Editors
126
Aurora Edit Installation Guide
Selective access You create groups of users, such as Editors or Producers, and
set permissions for each group.
Partial control You control access to branches of the Bin tree for users and groups.
Administrative control The Administrator has exclusive access to a tool in the
top-level bin that allows the setting of permissions in the top-level bins.
Bin
All
Monday-Sunday
Permissions
Full Control
Read/Write/Delete in top level bins, but
cannot delete material from newscast bins.
4 October 2010
Advertisement
Table of Contents
