Security Overview

Contents

Contract Management has five levels of security:

• User: security that follows the user independent of the database or project. These options are set in the User Account – Edit Window in the Contract Management Administration Application.
• Module: project and user specific security applied to areas of Contract Management. These options are set in the User Project Access Dialog Box.
• Process: project and user specific security applied to actions a user can perform. These options are set in the User Project Access Dialog Box.
• Reports, forms, and exporting: reports and forms follow the contact restricted security settings. A Contract Management administrator or project administrator can restrict a user’s access so that the user can only access designated reports and forms.
• Database: (Oracle only) database passwords can be changed in the Contract Management Administration Application to prevent users from accessing data.

User-level security:

User-level security follows the user from database to database and is not project specific. Contract Management administrators set users security in the Contract Management Administration Application.

Note: If a user has no access to a project (except the ability to open the project), Contract Management does not allow them to do anything from within the project.

Contract Management has three user levels: Contract Management administrator, project administrator, and restricted user.

Contract Management administrator level

Contract Management administrators have full access to all new and existing projects. Contract Management administrators can:

• Change module and process level security for all projects and users.
• Change the project administrator of any project.
• Delete any project.
• Copy project access rights from one project to any other project.
• Be project administrators.

  Note: Two users with administrator level rights are shipped with Contract Management (admin or sjohnson). To use one of these user accounts, enter one of the default logons when you start Contract Management: admin/admin or sjohnson/sjohnson.

Project administrator level

Project administrators have full access to projects they create or to which they are assigned. They can also:

• Change module and process level security only within projects they create or are assigned to. Project administrators can also change their own access rights.
• Change the project administrator of projects they create.
• Delete only projects they create or to which they are assigned.
• Copy project access rights from any project only to projects they create or to which they are assigned.

  Note: If the administrator of the project changes, the new project administrator gains full access to the project, and the original administrator becomes a restricted user.

Restricted user level

• By default, users have no access to projects (this includes all modules and any process level security).
• When a new user is added, all permissions in the User List dialog box are cleared (off).

Module-level security:

Module level security consists of areas of Contract Management a user can access while in a project. Administrators set these access rights from the User Project Access Dialog Box.

Note: This affects access to actions, alerts, and all other items that are accessed from the Workspace.

Access levels

Contract Management administrators or project administrators will assign View, Add, Edit, Export, or Delete rights for each module.

• View enables the user to view information only for this module.
• Add enables the user to add a new document in this module. You must also have Edit rights to add details to an added document.
• Edit enables the user to edit information in this module.
• Export enables the user to export from the module. If the user does not have export rights, Contract Management removes all e_ reports from the report list when a user selects a .PBL file.
• Delete enables the user to delete information in this module. You must also have Edit rights to delete details from a document.

Process-level security:

Process level security is something that a user can or cannot do while in a project. Examples include approving change orders and certifying requisitions.

Reports, forms, and exporting:

In the User Project Access Dialog Box, the Contract Management administrator or project administrator can select an option to enable or disable exporting. Also, when an administrator assigns access rights to a module, the rights to view and run reports and forms for that module are also set.

Database security:

If the password for a Contract Management database user or schema owner is changed on the database server, you can then use the Contract Management Primavera Administrator Utility (Admin Config Utility) to configure Contract Management to use the appropriate password. These passwords are encrypted for security purposes.