Enforcing Security

Security is enforced as users current location is recorded and access is restricted based on security rules. The program logic returns permit/deny according to related exceptions. The user’s physical location, particularly the country, is required to appropriately manage export control.

This page discusses:

See Also
Export Control Exceptions
Important: Intellectual Property (IP) Protected data can be exported from hard copy printouts, screen captures, or used with other products that might be used to capture thumbnail representations of the data. It is the user's responsibility to safeguard the IP Protected data and determine if the export, when distributed and used outside of the IP Protection application, constitutes a violation of the IP protection.

Recording Current User Location

The user indicates the country where they are currently located. The login screen disclaimer can be enabled to notify users of the security requirements of the PLM system.

Access Restricted

As users work in their area of responsibility, they might never know that secured and sensitive information exists in the system. Awareness of such data depends on the type of masking applied to the items within the security class and the access provided to a user or group. If a user does not have access, the items, including searches, do not display.

Checking Naturally Authorized People

Security Officers know that with established rules the correct user's are permitted to view information. Authorized people can be checked from each security class, and rules and exceptions examined separately.

Authorization by Exception

Authorized people can be checked from each security class. The exception that causes authorization is presented.

Audit Personal Authorization

Security Officers can determine what categories and individual items a user can see from the security classes and exceptions on that user. The security classes list all classes with a user's natural access and exceptions list the exceptions assigned to the user.

Export Event Logging

The Export Control Log is used to record informal export events for traceability and audit by phone, email, and presentation. Once created, the export control log can be forwarded for resolution using a route to the appropriate Security Officer.

Physical Shipment Event

Shipment Export Declarations can be used to record the required details of the hardware export event. Routes can be used to forward the shipper to the appropriate security officers for disposition as required.

Log of File Exports

Security Officers can review all of the file exports that have occurred in a selected time period.

IP Security Log Checkout Entries Report

This checkout action trigger is added for type DOCUMENTS to log the checkout and an object of type IP Security Log Entry with an attribute value of Export Log Entry = Check Out is created.