Managing Permissions on Object UI
For information on management of workflow UI access, see Managing Permissions on Workflows.The UI access rights (permissions) of a profile are defined by its associated Set of UI access rights.
For a new Set of UI access rights, by default its access permissions on an object are:
• inherited from the access permissions defined on the Set(s) of UI access rights it uses.
See:- Customizing the characteristics of an existing profile / Creating a profile from an existing profile.
For example the "Process Functional Administrator" Set of UI access rights (of the Process Functional Administrator profile) inherits from the permissions defined on the "Action Plan Manager", "Demand Creator", "Project Portfolio Manager", and "User Management Administrator" Sets of UI access rights.
• Inherited from the permissions defined by default (<HOPEX default>), if it does not use any Set of UI access rights.
See Creating a profile.
In the Object UIs page:
• the Access Rights field enables to select the Set of UI access rights for which you want to view or modify the permissions.
• the MetaModel field enables filtering of MetaClasses displayed in the MetaClass frame according to the selected MetaModel.
• "All” value lists all existing MetaClasses.
• value Extensions lists all MetaClasses that are not stored in standard Metamodels (MEGA Products products)
To define access permissions on objects, see:
Modifying access permissions on occurrences of a MetaClass
To modify access permissions on occurrences of a MetaClass:
1. Access the UI access management pages and select the Object UI Permissions.
2. in the Access Rights field, use the drop-down menu to select the Set of UI access rights.
<HOPEX Default> defines default access permissions of each MetaClass, MetaAttribute, MetaAssociationEnd and tool.3. In the MetaModel field, select the MetaModel concerned.
In the MetaClass frame, the listed MetaClasses are filtered according to the selected MetaModel.
By default Concrete MetaClasses are displayed, click Abstract MetaClass 
to display abstract MetaClasses.
4. In the MetaClass frame, select the MetaClass for which you want to modify configuration of access permissions.
By default, its configuration is that inherited from <HOPEX Default>.5. In the Permission field, enter the new value.
6. Press "Enter".
The value of the MetaClass permission is modified.
In the MetaAttributes/MetaAssociationEnds/Tools frame, the values of permissions of elements of the MetaClass are also modified.
To return to the default value of the permission on the MetaClass, enter the character *.
To obtain information on inheritance of the value, enter the character ?.
For example here:
The permission of Process Functional Administrator (Custom) on the Org-Unit MetaClass is inherited from the Set of UI Access Rights Project Portfolio Manager: CRUDS.
The permission of the Org-Unit MetaClass is CRUD, the command line of the Process Functional Administrator profile for the Org-Unit MetaClass is not restrictive: CRUDS.
You can also modify the MetaAttributes/MetaAssociationEnds/Tools of a MetaClass, see:
Modifying access permissions on MetaAttributes of a MetaClass
To modify access permissions of MetaAttributes of a MetaClass:
1. Access the UI access management pages and select the Object UI Access.
2. in the Access Rights field, use the drop-down menu to select the Set of UI access rights.
<HOPEX Default> enables to define default access permissions of each MetaClass, MetaAttribute, MetaAssociationEnd and tool.3. In the MetaModel field, select the MetaModel concerned.
In the MetaClass frame, the listed MetaClasses are filtered according to the selected MetaModel.
4. In the MetaClass frame, select the MetaClass concerned.
5. In the toolbar of the MetaAttributes/MetaAssociationEnds/Tools frame, click MetaAttribute 
.
.The MetaAttributes of the MetaClass are listed.
6. Select the MetaAttribute for which you want to modify permissions.
7. In the Permission field, enter the new value.
8. Press "Enter".
The value of the MetaAttribute permission is modified.
To return to the default value, enter the character *.To obtain information on origin of an inherited value, enter the character ?.Modifying access permissions on tools of a MetaClass
A tool can be available or not.
To modify access permissions on tools of a MetaClass:
1. Access the UI access management pages and select the Object UI Access.
2. in the Access Rights field, use the drop-down menu to select the Set of UI access rights.
<HOPEX Default> enables to define default access permissions of each MetaClass, MetaAttribute, MetaAssociationEnd and tool.3. In the MetaModel field, select the MetaModel concerned.
In the MetaClass frame, the listed MetaClasses are filtered according to the selected MetaModel.
4. In the MetaClass frame, select the MetaClass concerned.
5. In the toolbar of the MetaAttributes/MetaAssociationEnds/Tools frame, click Tools 
.
.6. Select the tool for which you want to modify access permissions.
7. In the Permission field, enter the new value.
8. Press "Enter".
The value of the tool access permission is modified.
To return to the default value, enter the character *.To obtain information on inheritance of the value, enter the character ?.Modifying access permissions of a link around a MetaClass
To modify access permissions of a link around a MetaClass:
1. Access the UI access management pages and select Access Object UIs.
2. in the Access Rights field, use the drop-down menu to select the Set of UI access rights.
<HOPEX Default> enables to define default access permissions of each MetaClass, MetaAttribute, MetaAssociationEnd and tool.3. In the MetaModel field, select the MetaModel concerned.
In the MetaClass frame, the listed MetaClasses are filtered according to the selected MetaModel.
4. In the MetaClass frame, select the MetaClass concerned.
5. In the toolbar of the MetaAttributes/MetaAssociationEnds/Tools frame, click MetaAssociationEnd 
.
.6. Select the MetaAssociationEnd for which you want to modify link access permissions.
7. In the Permission field, enter the new value.
8. Press "Enter".
The value of the link access permission is modified.
To return to the default value, enter the character *.To obtain information on inheritance of the value, enter the character ?.Modifying access permissions on links around a MetaClass
You can modify access permissions on:
• the link according to the MetaClass accessed via the link
• one of the MetaAttributes of the link
• one of the MetaClasses accessed via the link
Example: You can grant rights to connect (but not to create) an IT Service to an Application via this same link.
To modify access permissions on links around a MetaClass:
1. Select the MetaAssociationEnd.
2. In the menu bar of the MetaAttributes of MetaAssociationEnds/Slave MetaClasses/MetaAssociations, click MetaAttribute , MetaClass 
, or MetaAssociation 
.
, MetaClass , or MetaAssociation .3. In the list, select the MetaAttribute, MetaClass or MetaAssociation concerned.
4. In the Permission field, modify the permission value.
5. Press "Enter".
The value of the access permission is modified.
To return to the default value, enter the character *.To obtain information on origin of an inherited value, enter the character ?.Rules on permissions while aggregating Sets of UI access rights
When a Set of UI access rights uses one or several Sets of UI access rights, its permissions are defined by addition of permissions defined on the Sets of UI access rights it uses.
Example:
The Sets of UI access rights S1 and S2 are connected to the Set of UI access rights S3 of the profile P3.
If the permission value on an object A of the Set of UI access rights S1 is CR and the one of the Set of UI access rights S2 is RUD, then this permission value on object A for the Set of UI access rights S3 is CRUD.
Attention to default values
A permission value with * means that this value is the default permission value and that it has not been specifically defined. Only those values specifically defined are taken into account in aggregation.
Example:
The Sets of UI access rights S1 and S2 are connected to the Set of UI access rights S3 of the profile P3.
If the permission value on an object A of the Set of UI access rights S1 is *CRUD and the one of the Set of UI access rights S2 is R, then this permission value on object A for the Set of UI access rights S3 is R.