Administrative Lock
The administrative lock section identifies the administrative lock, if any, that is applied to the object. An administrative lock restricts the permissions available to participants for an object. The restricted permissions are listed in the administrative lock section. For example, access control rules grant Read, Download, Modify, and Modify Permissions to a user for an object with an administrative lock set. The Restricted Permissions list includes the Modify and Modify Content permissions. That user is granted only the Read and Download permission for that object while the administrative lock is applied. The user’s permissions, including those restricted by administrative lock, are listed in the Granted and Not Granted fields in the participant details section.
 |
It is not possible to undo or revert an administrative lock. Users who have the Administrative permission are also restricted by the administrative lock. An imported object on which an administrative lock is applied cannot be modified.
|
For the examples listed in the Participant Details section:
• For the user named Chris Taylor who is granted Read, Download, Modify, and Modify Permissions permissions through ad hoc rules:
Participant Name: Chris Taylor (ctaylor: ACME)
Applies To: Participant
.
.
.
Granted: Read, Download
Not Granted: Modify, Modify Content, Modify Identity, Modify Security Labels, Create By Move, Create, Set State, Revise, New View Version, Change Domain, Change Context, Delete, Administrative
Administrative Lock: Product Design Package
Restricted Permissions: Modify, Modify Content, Modify Identity, Modify Security Labels, Create By Move, Create, Set State, Revise, New View Version, Change Domain, Change Context, Delete, Administrative
Applies To: Participant
.
.
.
Granted: Read, Download
Not Granted: Modify, Modify Content, Modify Identity, Modify Security Labels, Create By Move, Create, Set State, Revise, New View Version, Change Domain, Change Context, Delete, Administrative
Administrative Lock: Product Design Package
Restricted Permissions: Modify, Modify Content, Modify Identity, Modify Security Labels, Create By Move, Create, Set State, Revise, New View Version, Change Domain, Change Context, Delete, Administrative
• For the system group named Consultant that is granted Full Control (ALL) permission through policy rules:
Participant Name: Consultant (Project - Bike Design)
Applies To: Participant
.
.
.
Granted: Full Control (ALL)
Not Granted:
Administrative Lock: Product Design Package
Restricted Permissions:
Applies To: Participant
.
.
.
Granted: Full Control (ALL)
Not Granted:
Administrative Lock: Product Design Package
Restricted Permissions:
• For all users except the user-defined group named Administrators that is denied Administrative permission through policy rules:
Participant Name: Administrators (Site)
Applies To: All except participant
.
.
.
Granted:
Not Granted: Read, Download, Modify, Modify Content, Modify Identity, Modify Security Labels, Create By Move, Create, Set State, Revise, New View Version, Change Domain, Change Context, Delete, Administrative
Administrative Lock: Product Design Package
Restricted Permissions: Modify, Modify Content, Modify Identity, Modify Security Labels, Create By Move, Create, Set State, Revise, New View Version, Change Domain, Change Context, Delete, Administrative
Applies To: All except participant
.
.
.
Granted:
Not Granted: Read, Download, Modify, Modify Content, Modify Identity, Modify Security Labels, Create By Move, Create, Set State, Revise, New View Version, Change Domain, Change Context, Delete, Administrative
Administrative Lock: Product Design Package
Restricted Permissions: Modify, Modify Content, Modify Identity, Modify Security Labels, Create By Move, Create, Set State, Revise, New View Version, Change Domain, Change Context, Delete, Administrative
Currently, only the Product Design Package administrative lock is available.
For more information, see About Administrative Lock.