1.3 About Rights

Rights control what you can and cannot do with sealed documents. Your rights to a particular sealed document can range from none (so you cannot even open the document), to Open (so you can read it on your computer screen, but do nothing else with it), through a range of rights to, for example, edit, print, and search the document. Your rights also control your ability to create new sealed documents.

Your rights can be changed over time, can differ from the rights of other users, and can differ from one sealed document to another. Your rights to a particular document depend on what context that document is sealed to. For example, your rights to documents in a Top Secret context might be much more restricted than for documents in a Confidential context.

Some rights effectively include others (for example, if you have the Edit right, you also get the Annotate and Interact rights), and some rights require others (for example, if you have the Edit right, you need the Open right to access the document, and you need the Reseal right so that you can save your edits).

When you are viewing a particular sealed document, you can see your rights for that document on the Rights tab of the Oracle IRM Desktop Control Panel. The Rights tab lists only rights that are relevant to the type of sealed document you are viewing.

This guide tells you the rights you need to perform common Oracle IRM tasks. If you need to perform tasks for which you do not have rights, you should ask an Oracle IRM Server administrator whether you can be given the necessary rights.

Note to Oracle IRM Server administrators:

The "rights" available in Oracle IRM Desktop are created by assigning "features", and setting constraints, within Oracle IRM Server. See the Administrator's Guide for Oracle IRM Server for full details.

The complete set of rights is described in Table 1-1, "Rights".

Table 1-1 Rights

Right Description Usage notes

Accessibility

Relaxes protection of sealed files so the use of accessibility tools and features is not blocked for sealed files. It does this by turning off program protection, screen capture protection, and keyboard protection in the file.

Some accessibility tools might work even without this right.

Annotate

Allows you to add comments in Microsoft Excel and Microsoft Word documents (DOC and RTF formats).

The ability to add comments may be the only editing you can do on sealed documents.

In Microsoft Word, the Annotate right negates the Interact right.

Copy

Allows you to copy content from a sealed document and paste it into any other document.

Allows you to change the context of a sealed document to any other context that you have access to.

Applicable only to Microsoft Office, email, and PDF.

If you have the Copy right, you do not have, or need, the Copy To right. This is because Copy To is more restrictive that Copy.

Use of copy and paste within a particular sealed document does not require any rights other than the Edit right.

Copy To

Allows you to copy content between documents that are sealed to the same context.

Allows you to copy content from a sealed document and paste it into a document that is sealed to another context, but only if this is a trusted context.

Allows you to change the context of a sealed document to another context that is a trusted context.

Allows you to make a copy of a sealed document and then change the context of the copy to another context that is a trusted context.

Trusted contexts are set up in Oracle IRM Server. You can check which contexts have been set up as trusted contexts for the current sealed document (there will be at least one), by looking under "Trusted Destinations" on the Rights tab of the Oracle IRM Desktop Control Panel.

If you have rights to copy content to other contexts, you also need the relevant rights in those contexts. For example, to copy content to a document in another context, you need the right to open and edit documents in that context.

To change the context of a sealed document, right-click it in a file browser and select Reseal To. You need the Copy To right for the current context and the Seal right for the destination context.

Use of copy and paste within a particular sealed document does not require any rights other than the Edit right.

Even with the Copy To right, you may sometimes not be able to copy content between documents (for example, in some multi-process environments).

Edit

Allows you to edit Microsoft Office documents.

The Edit right includes the Edit Tracked, Annotate, Interact, and Formulae rights.

Edit Tracked

Allows you to edit Microsoft Office documents, but enforces the use of the track changes feature of Microsoft Word.

The Edit Tracked right is included in the Edit right.

Formulae

Allows you to select and view formulae (formulas) in Microsoft Excel workbooks.

The Formulae right is included in the Edit and Edit Tracked rights.

Interact

Allows you to enter data into Form fields in Microsoft Word documents.

Allows you to enter data into unprotected cells of Microsoft Excel documents.

The Interact right is included in the Edit and Edit Tracked rights.

In Microsoft Word, the Interact right is ineffective if the Annotate right has also been granted.

Open

Allows you to open a sealed document and view it on screen.

The Open right might be the only right you have to a document.

The Open right is a prerequisite for all other rights except Seal and Search.

Print

Allows you to print documents to create paper copies.

The Print right is included in the Print to File right.

Print To File

Allows you save a document as a print file, or send documents to a virtual printer (for example, Adobe PDF).

Print To File includes the Print right.

Program

Allows you to use macros within a sealed document to manipulate the document's content.

 

Reply

Allows you to edit a sealed email to create a reply.

You also need Reseal to save your email edits.

You do not need Edit when replying to sealed email.

Reply does not allow you to create new sealed emails. That requires the Seal right.

Reply Tracked

Allows you to edit a sealed email to create a reply, but enforces the track changes feature.

You also need the Reseal right to save your email edits.

Reply Tracked does not allow you to create new sealed emails. That involves creating a new sealed document, and therefore requires the Seal right.

Reseal

Allows you to save edits to a sealed document or to a sealed email reply.

When you save a sealed document, you can use a different filename, but the new file is subject to exactly the same rights as its source document.

The Reseal right is not associated with the Reseal To option available when right-clicking a sealed file in a file browser (such as Windows Explorer). For an explanation of the Reseal To option, see the Copy To right.

Save Unsealed

Allows you to create an unsealed copy of a sealed document.

This right enables you to create an unprotected copy of a sealed document.

An unsealed document can be created using the Save As option in applications.

An unsealed document can also be created using the Unseal option when you right-click a sealed file in a file browser (such as Windows Explorer).

Screen Capture

Allows you to take screen captures of sealed documents. (See "Screen Capturing Sealed Documents".)

Apart from its obvious use, you might be given this right if you have a legitimate reason to use an application that sends images from your computer to another computer, such as a web presentation product.

Seal

Allows you to create a new sealed document or email.

Typically, if you have the Seal right, you also have the Edit right, so that you can edit the documents you create. However, if you have been given the Seal right so that you can use sealed email, it is possible that you will not have the Edit right. Sealed email usage requires the Seal right for email creation, and the Reseal and Reply (or Reply Tracked) rights for replying.

Search

Allows you to use Microsoft Windows search facilities to search the content of sealed documents.

Unless you have this right, searches will not include the content of sealed documents.

Searching sealed PDF requires a search filter from Adobe as well as the Search right.

Set Item Code

Allows you to manually set the item code of a sealed document.

Item codes are mostly allocated and updated automatically, and reflect the name of a sealed document and the time that it was sealed. Not all sealed documents have item codes.

You might be given the right to allocate item codes manually. If so, you will see some extra options and messages when working with sealed documents, and you should be trained to understand what you need to do.