The Event 1 Office Connector Operator Administrator is a program that IT administrators can use to allow or deny access to the licensed modules of Office Connector. The permissions are stored per Timberline operator ID in an encrypted Microsoft Access database, which is automatically created when the program is executed.
It is the responsibility of the IT manager to correctly configure and maintain the Office Connector Operator Administrator database to grant or prevent unwanted access to functionality. In order for the assigned permissions to be enforced, the permissions database (OCOperators.mdb) must be found in the Timberline Misc folder, and the user must have permissions to read the file.
Module Permissions
The Office Connector family of products segregates different types of program functionality into modules. Currently, there are two modules available: Office Connector Query and Office Connector Write. The Office Connector Operator Administrator allows you to control which Timberline operators have access to which types of functionality. For example, you could allow an operator to query the Timberline database, but prevent him from writing to it using Office Connector.
Office Connector module permissions should not be confused with Timberline database security or Windows file security. Office Connector module permissions only control which Office Connector modules the end user can access via Excel. For example, restricting write permission in Office Connector does not prevent the user from updating data via Timberline or their own ODBC connection. Similarly, granting permission to use the Write module of Office Connector does not override Timberline database security or ODBC driver limitations.
Factory Default Permissions
To ease deployment for the majority of Office Connector users while still offering protection from unintended data modification, the factory default permissions allow access to the Query functionality only. The factory default permissions are automatically applied when the permissions database can not be read. The following conditions will cause the factory default permissions to be applied:
The permissions database was moved, deleted or never created
The permissions database is not accessible due to Windows file permissions
The permissions database has been damaged or otherwise altered in a way that prevents it from being read
Custom Default Permissions
It is possible to override the factory default permissions by using the Office Connector Operator Administrator to establish custom default permissions. Custom default permissions apply to all Timberline operator IDs that are not specifically listed in the Operators list on the main window. For the sake of readability, the remainder of this manual uses the term "default permissions" to refer to custom default permissions.
Additional Restrictions on Writing
Office Connector enforces additional restrictions on the ability to use the Write functionality when the license is in evaluation mode. This is a safeguard to protect your data from updates that were not intended by your company. The ability to write data using an evaluation license can be acquired by contacting our sales department at http://www.event1software.com/action/contacte1.htm.
After contacting our sales department, you will be provided with a link to download the setup program for Office Connector Operator Administrator. You may install the program to the location of your choice. After setup has completed, Event 1 recommends deleting the setup program and using Windows file permissions to prevent unauthorized access to the OCOperatorAdmin.exe file.
Using Office Connector Operator Administrator
The first time you run Office Connector Operator Administrator, it automatically creates an encrypted Access database in the Misc folder under the Timberline system directory. Office Connector users must have read access to this file if you wish to implement permissions. If the database is deleted or your Timberline system directory moves, the database will automatically be recreated the next time you run Office Connector Operator Administrator.
Main Window
The main window of the Office Connector Operator Administrator allows you to maintain a list of Timberline operators and their permissions. The <Add> and <Remove> buttons allow you to manage the list of operators. The Permissions list allows you to view and assign permissions for the selected operator. The <Defaults…> button allows you to define the permissions for operators that do not appear in the list. The <Close> button exits the program.
Office Connector Operator Administrator main window
Adding Operators
If a Timberline operator ID is not displayed in the Operators list, then that operator will be granted the default permissions. To add an operator,
Click <Add...>
Type the operator ID.
Hit the <Enter> key or click <OK>.
Removing Operators
To remove an operator,
Select the operator in the Operators list
Click <Remove>
Assigning Default Permissions
The Office Connector Operator Administrator allows you to establish default permissions that apply to any Timberline operator IDs that do not appear in the list. The default permissions are also automatically copied when you add new operators. Changing the default permissions does not affect any operator who has already been added to the list. To assign default permissions,
Click <Defaults…> to display the Default Permissions window.
Check the boxes of permissions that you wish to grant by default
Uncheck the boxes of permissions that you wish to deny by default
Click <OK>
The Default Permissions window
Timing
Office Connector reads the permissions database every time a connection to a new data folder is established. Any changes you make in the Office Connector Operator Administrator program will not be reflected in Excel until the user logs in to a new data folder. To guarantee that all changes take effect immediately, you can instruct users to exit Excel and reload their spreadsheets.
