Access rights for electronic safe deposit systems

Access rights for electronic safe deposit box systems

The Access rights for compartments of electronic safe deposit systems can be assigned very flexibly.

Each access right applies to a specific person and a time range.

If no explicit rights are assigned to the person, access rights can also be "inherited" indirectly via the customer/cost center of the person. "inherited".

The deputies of a person "inherit" the access rights of the deputy for the period of the deputization if routing continues to the deputy (original recipient). deputy (original recipient). If the transmissions are diverted to the deputy during the deputization, the deputy's own rights apply. rights of the deputy apply. The rights of the deputy are applied recursively (deputy of the deputy, etc.).

The rights/prohibitions of customers are NOT "inherited" to the cost centers, therefore these must be explicitly assigned to the cost centers.

The The determination of the effectively applicable law of a person is carried out according to the following algorithm with fixed defined priorities and rules:

1): Directly explicitly banning a person from a subject. The person never gets access to the subject. All subsequent rules are no longer applied. The definition of such a ban is done in the dialog Mailbox: Right.

2): Indirect Explicit prohibition of a person (via their customer/cost center assignment) for a compartment. The person never gets access to the compartment. All subsequent rules are no longer applied. The definition of such a prohibition is made in the dialog P.O. Box facility: Rightavailable on the master data of customers/cost centers in the tab "Specialized installations".

3): Directly explicit right of a person for a subject. The person always always (unrestricted) access to the compartment. All following rules are no longer applied. The definition of such a prohibition is made in the Mailbox: Right.

4): Indirect explicit right of a person (via their customer/cost center assignment) for a subject. The person always has (unrestricted) access to the box. All following rules are no longer applied. The definition of such a prohibition is done in the dialog P.O. box facility: Right , available on the master data of customers/cost centers in the tab "Pigeonholes" tab.

5): Direct prohibition of a person for all subject facilities/subjects and all or specific services for a specific time period by a definition of "no subject assignment". See Subject Facilities Subject Assignment.

6): Indirect prohibition a person (via their customer/cost center assignment) from all subject facilities/subjects and all or specific services for a specific time range by a definition of "No subject assignment". See Subject Facilities Subject Assignment.

7): Direct implicit right of a person via static or dynamic (with broadcast in the compartment) assignment of the person to the compartment. The access right is only valid for the recorded time range.