File permissions

By default, the New Station Wizard assigns the entire station’s File space to category 2 (Admin). A station's config.bog file and config.bog.backup files are not accessible (even by super users) in the station's file space. If needed, other station files and folders may be hidden from a remote station.

Users typically require that the role assigned to them have operator-level read permission on station file folders, such as ^nav, ^px, ^images, ^html, and so on. However, permissions higher than an operator-level read on the Admin category should only be assigned to selected users on an as-needed basis. In most situations, creating a new category containing only the components a user needs to access is a more appropriate solution.

Largely, rights granted to access categories that are used by files and folders are operator-level permissions as follows:

• Files require operator-level read (r) access to view, and operator-level write (rw) access to edit a file (if applicable). For instance, a user with operator-level write and write (rw) access to an .html file can modify it using the Text File Editor in Workbench.

• Folders (directories) require operator-level read (r) access to list and to copy child files, and operator-level write (rw) access to create new (or delete existing) child files.

A few views of files require admin-level Write (rwRW) permissions to access, such as the Nav File Editor for a Nav file. There are also these special case file permissions:

• The system automatically restricts any system module files to operator-level read (r) access.

• If a user is not a super user, the system denies all access outside of the station's home directory.

• Users need admin-level Read (rwRW) access to see a Supervisor station's ^provisioningNiagara folder (written to by the Supervisor's provisioning mechanism).

• If you have a developer license, your system includes an additional category called NModuleDevFilePermission. This category grants rwRW permission to access all system modules.