Restrict access to output generation

By default, all users can generate output. You can restrict output generation to selected roles or groups or to objects at a certain status.

About this task

If there are certain users whom you want to restrict entirely from generating output, or if you want to restrict output to only objects at a certain status you can do so in one step by adding and configuring the Generate Output access right.

Users without this access right do not see the Generate output option at all in the CCMS Desktop right-click menu or in the CCMS Web More Options menu.

This is a broad option. If you only want to restrict outputs of a certain type, you should configure the individual output-type related access rights instead. See Output access rights for a list of those.

Procedure

  1. In the TEXTML Administration perspective, connect to your server.
  2. Browse to /system/conf to locate the accessrights.xml file.
  3. Right-click accessrights.xml and select Check Out.
  4. Open the file in an XML editor.
  5. Near the end of the file, just above the line that reads <!-- ********************** AVAILABLE METHODS - DO NOT MODIFY ********************** -->, paste the following: 
    <method name="Generate Output" type="front-end">
     <notify enabled="false"/>
     <conditionset operator="any">
          <condition>
               <current>
                    <type name="map">
                         <statuses>
                              <status>_____</status>
                         </statuses>
                    </type>
                    <type name="topic">
                         <statuses>
                              <status>_____</status>
                         </statuses>
                    </type>
               </current>
               <users>
                    <roles>
                         <role name="_____"/>
                    </roles>
                    <groups>
                    </groups>
               </users>
          </condition>
     </conditionset>
</method>
  6. Configure the access right as appropriate to specify:
    • each applicable object type
    • each applicable status for each object type
    • the roles and groups that can generate output for that object at that status
    <method name="Generate Output" type="front-end">
     <notify enabled="false"/>
     <conditionset operator="any">
          <condition>
               <current>
                    <type name="map">
                         <statuses>
                              <status>Authoring:done</status>
                              <status>Published:done</status>
                         </statuses>
                    </type>
                    <type name="topic">
                         <statuses>
                              <status>Authoring:done</status>
                              <status>Published:done</status>
                         </statuses>
                    </type>
               </current>
               <users>
                    <roles>
                         <role name="Information Architect"/>
                    </roles>
                    <groups>
                    </groups>
               </users>
          </condition>
	  <condition>
               <current>
                    <type name="map">
                         <statuses>
                              <status>Localization:done</status>
                         </statuses>
                    </type>
                    <type name="topic">
                         <statuses>
                              <status>Localization:done</status>
                         </statuses>
                    </type>
               </current>
               <users>
                    <roles>
                         <role name="Translation Coordinator"/>
                    </roles>
                    <groups>
                    </groups>
               </users>
          </condition>
     </conditionset>
</method>

    This example specifies that Information Architects can generate output for maps and topics at Authoring:done or Published:done only. Translation Coordinators can generate output for maps and topics at Localization:done only. This scenario ensures that output is never created for maps and topics before they are finalized.

  7. Save and check in accessrights.xml.
  8. Refresh the Web Server and instruct users to restart CCMS Desktop.