Previous Topic: Security and Permissions

Next Topic: Encryption


Enabling Security

Software security can be configured to behave in one of the following ways:

Default Deny

Under these conditions, everything not explicitly permitted is forbidden. While this method can improve security, it may negatively affect functionality.

Default Permit

Everything is permitted. The advantage of this security method is that it allows greater functionality, and it can be adequate for the initial phases of setting up and testing the system.

By default, security in the CA GovernanceMinder Portal is disabled. When a user logs in, using a recognized user name, the CA GovernanceMinder Portal does not verify the user permissions and there are no limits on what the user can see and do.

You configure the type of security used in the CA GovernanceMinder Portal by setting a security parameter in the eurekify.properties file.

The security parameter resembles the following:

sage.security.disable=true

When this property is set to false, CA GovernanceMinder switches to the Default Deny security method. Only functionality that is explicitly permitted is visible and enabled for the user.