Tag: security

  • User-less Login to PLM 360

    Let’s say you have a service that synchronizes data to PLM 360 in the background. It’s a headless system, so there is no UI. The problem is that PLM uses 3-legged OAuth 1.0, and “human” is one of the 3 legs. There are lots of blockers to prevent a non-human from authenticating. For example, there…

  • Effective Permissions 2014

    If you are a Vault Administrator using the advanced security features in Vault, you need this app.  Period. Here is the video from the 2013 version if you need some background on the app.  I didn’t add any new features in 2014. Requirements: Vault 2014 Workgroup / Professional Administrative Rights Click here to download the…

  • Effective Permissions 2013

    I’m currently in an amazingly interesting DB training class. So I decided to do some Vault app programming so that my heart wouldn’t explode from all the excitement. The result is Effective Permissions 2013. It’s an update of my Effective Folder Permissions 2.0. The ‘Folder’ part of the name has been dropped since it now…

  • Entities and Behaviors

    There are 2 concepts in the Vault API: Entities and Behaviors. The two concepts are intertwined; you can’t describe one without describing the other. An Entity is an object that can have behaviors on it. A Behavior is a feature that can be applied to entities.

  • Security – Folder ACLs and System ACLs

    If you haven't read my earlier article on security, you might want to do that first.  This article is going to dig deeper into Vault's the security framework.  That's right, there's even more.  The good news is that the hard stuff is over.  Now that you know what an ACL is an how it's used…

  • Security

    Vault uses two different security mechanisms.  There is a system based on user permissions and a system based on access control lists (ACL).  The permissions-based security is part of the base Vault functionality, but the ACL based security is an optional feature which may or may not be available depending on the version of Vault.…

  • Windows Authentication

    Do not send Windows usernames and passwords to Vault!!! Yes, I know the login dialog makes it look like this information is going to Vault, but that’s not how it works at the API level.  What is really going on is that the Win Auth Service is used to sign in to Vault instead of…