KB20334: How to grant specific permissions to objects and folders in MicroStrategy Developer 9.4.1

SYMPTOM:
In Strategy Developer 9.4.1, administrators have the ability customize the type of access users have to objects. The following permissions can be applied to specific users or groups:
 

• View: this permission allows the group or user to access the object for viewing only.
• Modify: this permission allows the group or user to view and/or modify the object.
• Full Control: this permission gives the group or user all permissions to the object.
• Denied All: this permission denies the group or user all permissions for the object.
• Default: this permission neither grants nor denies permissions for the object; rather, the permissions are given by inheritance.
• Custom: Choosing this permission allows the administrator to allow other privileges, such as Browse, Read, and Write.

For more information about the explanation of the Strategy 8.x Access Control List permissions, please see
 
KB5700-7XX-0938- Explanation of Strategy 8.x Access Control List permissions
 
The steps to apply permissions on a object level are as follows:

• Right-click on the object or folder (a folder is used in this example) and select Properties, as shown below:
  

• Choose the "Security" tab, as shown below:
  

•  
  
  NOTE:
  The permissions in the Access Control List for each folder have been added by default by the User Manager.
   
  
• Select 'Add' to include a group or user to the list as shown below:
  

•  
  
  NOTE:
  To show individual users in a group, check the 'Show users' check box located in the lower left hand quadrant of the dialog box.
   
  
• Add the user to modify and double-click on the portion of the grid below the word 'Object' so that it turns into a drop down box. Select 'Custom…' as shown below:
  

• After selecting 'Custom…', the following dialog appears:
  

• Select the privilege that the user or group will have by clicking on the drop down menu next to the permission.
  

• After making the changes to the permission type, click on Ok. The securities tab of the properties dialog box will now display 'Custom' under object.
  

It is important to note that group permissions are overridden by object level permissions. That is, if a group is granted Write access but the user is denied the permissions that exist in that group via object level permissions, the user's inherited group privileges will override any object level permissions specified by the Administrator.