Data access control

The framework’s data structure is designed for secure management of core application and user data. During installation and platform commissioning , the framework differentiates between two types of files based upon the content of the files: configuration and runtime data.

Files and folders that contain configuration data reside in separate locations from files and folders that contain runtime data.

  • The System Home directory contains runtime files, such as core software modules, the JRE, and binary executables.
  • The User Home directory contains each station and its configuration data, including system properties, templates, option files, registries, logs and other data.
  • The Daemon user home directory contains platform configuration data for the daemon server process.

This directory structure enhances security by denying general access to the runtime files and allowing each user access to only their personal configuration files. Because configuration data are not combined with runtime data, users do not require full access permissions for an installation. This provides the flexibility administrators need, to regulate user access.