Administration > Vendor Portal Administration > Setup and Configuration > Document Security
  
Document Security
Out-of-the-box, when a vendor tries to search and add a document to an object, the vendor can only see documents it owns. The OpenTypes.DOCUMENT property allows the vendor to view and update different document types. The actions (view, create, edit) that can be performed on the available objects are controlled through the Policy Administration utility. Once the OpenTypes.DOCUMENT property is configured, vendors can view different levels of the type tree under the document type, but do not have access to subtypes or any other document type unless access has been specifically granted. Because it is possible to give a vendor create access to a document type that they do not have view or edit permissions for, and do not see in search results, you must carefully review document access controls and the settings related to vendors in the Policy Administration utility.
VendorPortal.properties File
Refer to the out-of-the-box VendorPortal.properties file for further description of these settings.
Each document type and vendor group is separated by a pipe |, allowing multiple vendor groups to be on the same line. It is also possible to add a sequence number. For example, .2 or a .3 to make lines easier to read, as well as break out each document type or vendor group per line.
OpenTypes.DOCUMENT.1=Document\\AllVendors:ALL|Document\\RestrictedVendorsFlexType:CompanyX
OpenTypes.DOCUMENT.2=Document\\Footwear\\vendorAccessFlexType1:CompanyX,CompanyB
* 
The OpenTypes.DOCUMENT property is used to allow as few as one vendor or as many as all vendors access to all document instances of the specified type configured in the property.