Protecting databases > Creating and editing privilege sets > Editing scripts privileges
 

Editing scripts privileges

Privilege sets can limit access to scripts in a file. For a file, you can set:

Privileges for all scripts: you can allow or prohibit the ability to view, create, and modify scripts. You can also hide all the scripts in a file to prevent them from being run by the privilege set.

Custom privileges for individual scripts: you can set whether each script is modifiable or not. You can also hide a script to prevent it from being run by the privilege set.

Note  Although some script privileges described below allow the ability to run scripts, the actions permitted by a privilege set determine whether the steps in a script will execute successfully or not. For example, if a privilege set does not permit accessing a Salary field, then a script containing the Go to Field [Employees::Salary] script step will fail. You can override script privileges by granting full access privileges to the script in the Script Workspace.

To edit privileges for all scripts:

1. Start editing a new or existing privilege set in the Edit Privilege Set dialog box.

See Creating and editing privilege sets.

2. In the Data Access and Design area, for Scripts, choose All modifiable, All executable only, or All no access. These options allow or prohibit the following:

 

Privilege

All
modifiable

All
executable only

All no
access

Running scripts

Allowed

Allowed

Prohibited

Viewing script names in the Scripts menu
(except those that are hidden by clearing the checkbox to the left of the script name in the Script Workspace)

Allowed

Allowed

Prohibited

Opening the Script Workspace to view, create, group, filter, edit, duplicate, delete, and print scripts

Allowed

Prohibited

Prohibited

Allowing scripts to be imported into other database files

Allowed

Prohibited

Prohibited

Viewing script steps in the Script Debugger and Database Design Report

Allowed

Prohibited

Prohibited

To edit privileges for individual scripts:

1. Start editing a new or existing privilege set in the Edit Privilege Set dialog box.

See Creating and editing privilege sets.

2. In the Data Access and Design area, for Scripts, choose Custom privileges. In the Custom Script Privileges dialog box, select each script (or select Any New Script to set privileges for any script created later) and set privileges for it. When you’ve finished setting privileges for individual scripts, click OK.

 

To

In the Custom Script
Privileges dialog box

Allow running, viewing, editing, printing, and deleting the script; also allow the script to be imported into other database files

For Privilege, choose Modifiable.

Note  Even if the script is modifiable, you cannot modify a script that runs with full access privileges unless your account is assigned the Full Access privilege set. See Creating and editing scripts.

Allow running the script only; prohibit viewing the script in the Script Workspace

For Privilege, choose Executable only.

Prohibit running or viewing the script; the script name will not appear in the Scripts menu

For Privilege, choose No access.

Allow creating new scripts and duplicating any modifiable script

Select Allow creation of new scripts.

Notes 

In the Custom Script Privileges dialog box, the Notes column indicates which scripts run with Full Access privileges. Depending on what these scripts do, you may want to set Executable only or No access script privileges for them in certain privilege sets. For more information on running scripts with Full Access privileges, see Creating and editing scripts.