Security

The Permissions rules include the following, to cater for Workspace specific access rights.

Area	Access Rights
Workspace page	Accessible by all users.
Tasks and Administration options	The options shown are limited to those that the user has access to, based on the configured Permissions rules.
Urgent Assignments banner	All users who have urgent Assignments.
Assignments Due pane	All users, filtered to show their Assignments.
Resources and News Items	All users.
Announcements maintenance	Users with the News Administrator authority profile only.
Review Readership action	Users with the News Administrator authority profile only.
Photo Album	Users with the News Administrator authority profile only.
KPIs Dashboard	Retailer/portal owner users with the Advanced Reporting Administrator, Advanced Reporting User, or Advanced Reporting Reader authority profiles.
Manage Workspace KPIs	Only accessible to retailer/portal owner users, and who have Advanced Reporting Administrator or Advanced Reporting User authority profiles; otherwise, it is hidden.

All rich text data entered in Workspace is cleansed to ensure there are no illegal HTML characters, such as for an SQL injection attack.

See the Appendix: Security UI for details of the administration of the JET UI user access permissions.