Named User CAL - Restrict Access To All Docs

[Anonymous]

We have recently converted some document cals to named user cals and its seems that named user cals can open every document. Is there / what's the best way of restricting access to the documents for the named users? -The document cal method works fine for the other users.

I think I remember reading somewhere we could put documents in folders and then AD security groups and NTFS permissions but that seems like it could be a bit admin heavy.

We are using section access already for data reduce, would it have to be in there?

Thanks,

[Miguel_Angel_Baeyens · Accepted solution]

Hi,

You are right, a Named User CAL allows that user to see as many documents as available in the AccessPoint. However, there are several methods to make them unavailable for users. One is using the NTNAME field in section access, so the Document List in the AccesPoint is filtered by it, and if the user NTNAME is not listed in section access, he will not be able to see this document. To make sure this happens in the document, go to the Settings menu, Server tab, and check Document List Based on Section Access.

Another one is what you mention in regards to NTFS permissions, but only in the case you have chosen NTFS as your security method for authentication and NTLM as authorization in the QMC.

If you are using DMS, make sure you Authorize the correct users in the Documents, User Documents, Authorization tab within the QMC. When you generate a new task you can set it in the Distribute tab if you are using Publisher.

Hope that helps.

Miguel

[Anonymous]

Thanks Miguel, clear now. I think we'll just be putting Section Access on all docs and use the server filter.