The Need to Manage Sensitive Data
Certain modeling projects may be confidential or contain confidential or sensitive data: costs, risks, controls.
The HOPEX administrator may therefore need to mask objects corresponding to confidential or sensitive data.
These objects must be visible only to authorized users.
To meet these requirements concerning data confidentiality, HOPEX offers functionalities for implementing consistent and effective confidentiality policies.
This features applies to data in the data repositories only (i.e.: confidentiality management does not apply to SystemDb repository data).General Concepts
To implement a data confidentiality policy, objects must be organized in distinct sets. Each set of objects is a reading access areas.
A user is a person with a login.A person can belong to a group. A user group is a group of persons with a login. Each user or group of users is associated with a reading access area. It is the person or person group that carries the reading access area.
The reading access area to which the person or person group belongs determines the objects that the user or group of users can see. A user or user group can only see objects located in his/her own or lower confidentiality areas.
With definition of reading access areas, hidden objects are inaccessible. This concept differs from that of the filter, which hides occurrences of MetaClasses so as not to disturb the final view of the user, see Permissions to Access UIs.Activating Data Reading Access Management
When you activate reading access management, confidential data is visible only to authorized users. Before activating reading access management, MEGA recommends that you familiarize yourself with reading access management using MEGA.
For more details on confidential data, see Confidential or Sensitive Object Behavior.To manage confidential or sensitive data , you must first activate data reading access area management.
To activate data reading access management:
1. Connect to HOPEX Administration and select the environment.
2. In the User Management folder, right-click Data Reading Access and select Activate Management.
A message warns you that activation of reading access management is irreversible.3. Carefully read this warning message, then click Yes if you wish to activate data reading access management.