Running, Testing, and Debugging Processes › Runtime Security › Properties Affecting Security of Running Processes

Properties Affecting Security of Running Processes

Only the process owner or environment content administrators can set Runtime Security. Two process properties impact runtime security for instances of this process:

• Runtime Security
• Run as Owner

Runtime Security

Specifies whether to enforce runtime security for this process. Runtime security can be enabled or disabled either explicitly or through inheritance. When set explicitly, changes to inherited settings have no impact.

Inherit from Orchestrator

Applies the same setting that is currently configured on the orchestrator. Enable Runtime Security can be selected or cleared on the Policies tab of the parent orchestrator.

Enable

Indicates you want to enable Runtime Security. When a user attempts to start an instance of this process, CA Process Automation examines the setting for Run As Owner for the user.

• If Run As Owner is selected, CA Process Automation determines the user currently set as owner and starts the process under the identity of the owner. If this process calls another process, that process runs under the identity of the owner of the parent process.

  Note: This setting can be overridden at the operator level if Run as caller user is selected.

• If Run As Owner is cleared, CA Process Automation examines permissions for the user that is attempting to start an instance of the process. If that user has start rights, CA Process Automation allows the process instance to start under the caller user identity. If this process invokes another process set as caller user, CA Process Automation checks start rights for the child process.

Disable

Indicates you want to disable Runtime Security. The Run As Owner check box is disabled.

Run As Owner

This check box is enabled only if Runtime Security is enabled either explicitly or through inheritance.

Selected

Specifies that all instances of the current process can run under the identity of the owner (run as owner). When an authorized user starts the process, the owner gains access to child processes and other objects. Access by the owner can include objects that the caller user, who launched the instance, is not permitted to access. Only the process owner or environment content administrator can set this property.

Cleared

Specifies that start permission is verified at runtime for the caller user that attempts to start the process instance .