4.3 Workspace security

Only those who have been invited to the workspace will have access to it when they log in. Users added to a folder within a workspace structure automatically have access to all the contents of this folder. (The exact level of access they have is determined by the access rights prescribed for them.) They will also be able to determine the name of the workspace in which this folder is contained.

Whenever a user attempts to access an object in Business Collaborator, whether it is a folder, document, relational database or anything else, the system will check that this user has sufficient access rights to perform the action that they are attempting on that document. For instance, if a user is sent a web link (URL) to a folder by a colleague, they will be refused access if they are not a member of the relevant folder. They will have to ask the colleague to invite them to the folder to enable them to see the information or to move it to somewhere where they do have access.

It is not possible for someone to "guess" the name of a folder in an attempt to access it because every object in Business Collaborator is stored using its unique identifier rather than its name. Furthermore, they will be prevented from accessing any objects which they do not have sufficient rights to access.

Using specific access rights (see section 4.6) it is also possible to give access to selected documents within the workspace to people who are not workspace members. However, these users will only be able to access the documents via links to them and they will not be able to locate them by navigating through the workspace hierarchy.