OLIB operates various mechanisms for protecting access to data:
Every User on the system has a Privilege Level that is a number from 0-9. This determines what actions they can perform in OLIB. e.g. Create, delete, modify data; use the save searches and create folders features. These activities are restricted according to your Privilege Level. Most OLIB Web and WorldView Users have a Privilege level of 6 - Library Staff. A User's Privilege Level defaults from User Categories.
Users also have Permissions. These determine whereabouts in the system, a User can apply their Privileges.
e.g. A Circulation Desk User needs to create and modify records, however they only require permission in the Circulation system and not in the Acquisitions system. User Permissions are applied via User Groups and a default set are provided for this purpose.
Permissions can be set on various 'objects' in OLIB:
- Records: e.g restricts Users on an individual Title record
- Saved Searches
- Domains: restricts users by the Menu 'domains'
- Actions (OLIB Web): restricts actions you can carry out on a given record
- Layouts and Sheets
There are 4 different options for permissions management:
Every attribute - 'field' in OLIB, has an attribute privilege level that can restrict access by various Users at field level.
In a new implementation the following steps are taken:
- Create User Categories with a specific Privilege Level. All Users with that Category will receive that Privilege Level, e.g. Catalogue and Modify.
- When end Users e.g. Students are imported into OLIB the relevant User Category is assigned. Manually create staff Users also, and assign the correct User Category.
- As part of the import process end Users are also normally assigned to the ALL USERS GROUP which has limited access. Manually assign staff Users to the relevant User Group. This is their Permission Group that gives them access to the relevant parts of OLIB, e.g. Cataloguers.
- In line with your organisation's system security policy, set up Password Management in OLIB. For in-depth documentation please contact the UK Support Desk.