Assigning security privileges

The Publisher supports security privileges in some source document management systems and also supports security privileges in the publishing queue.

To grant the privilege to publish documents that reside in a Meridian Enterprise source vault:

1. Add the Publish Document privilege to the appropriate Meridian Enterprise roles as described in the BlueCielo Meridian Enterprise Configuration Guide .
2. Assign the roles to Windows groups or users for the vault folders that contain documents that you want to be able to publish. For more information on assigning roles to vault folders, see the BlueCielo Meridian Enterprise User's Guide .

The Publisher supports two security roles in its queue:

• Administrator – Can modify the publishing status of any document.
• Owner – Can only modify the publishing status of documents that they added to the queue.

All users are assigned the Owner role by default.

To assign users to the Administrator queue role:

1. Locate and open the Publisher web.config file in any text editor. By default, it is located in the default website folder.
2. Locate the following line in the file:

<setting name="Administrators" serializeAs="String">

3. Below that line, add one value element that contains a semicolon-delimited list of all user accounts that you want to add to the Administrators role. Use the following syntax:

<value>
  <DomainName1>\<UserName>;<DomainName2>\<UserName>;...<DomainNameN>\<UserName>
</value>

For example:

<value>AcmeGlobal\JBrown;AcmeEurope\BSchmidt;AcmeAsia\MHong</value>

4. Save your changes and close the file.

NEW Note    These security privileges do not work if the Publisher queue is configured for anonymous authentication. The result is that the queue cannot be opened as an administrator to modify the publishing status of documents in the queue. The workaround is to allow local user accounts to access the queue as administrators. This can be done by configuring the EnableLocalAdministration setting in web.config similar to the preceding setting. Set the option to True to allow local accounts administrative access to the queue. The default is False.