Security clearance

Security clearance

Security clearance allows you to assign access with grades, which you create according to your needs, which you can apply to your records.

Security clearance is a principle of access in grade. These grades determine whether users or groups have access to a record, according to the grade assigned to them.

It is possible to create several grades from the most permissive to the most secure. 

1. Create a security clearance

To create a classification, please follow these guidelines: 

1. In the navigation menu, go to "Administration";
2. Then click on "Manage Security";
3. In the security management page, a tab is called "Security Clearance". Click on it.
4. This window appears. Click on the " + " at the end of "Security Clearance". 
5. The Add Classification form appears. Fill out the form and "Save".
6. You can create several grades one after the other to give a tree of this kind.
7. It is possible to create several types of security clearance. 
8. "Save" your security clearance. It is now possible to use them. 

2. Delete a security classification

2.1 Unrelated to recordings

To remove a security classification, follow these guidelines: 

1. In the navigation menu, go to "Administration";
2. Then click on "Manage security";
   
3. In the security management page, a tab is called "Security Clearance". Click on it.
   
   
4. The classifications window appears. Place your cursor over a classification, these icons appear.
5. Click on the trash can to "Delete".
6. Confirm deletion by clicking "Yes";
7. The classification level is removed.

2.2 Replace security

1. In the navigation menu, go to "Administration";
2. Then click on "Manage security";
3. In the security management page, a tab is called "Security Clearance". Click on it.
4. The classifications window appears. Place your cursor over a classification, these icons appear. 
5. Click on the trash can to "Delete";
6. This window will appear to offer you to "Replace Security" of records linked to another security classification;
7. Select a different classification and then "Replace Security".
8. The grade is deleted and the records have been linked to the new classification.

2.3 Removing security

1. In the navigation menu, go to "Administration";
2. Then click on "Manage security";
   
3. In the security management page, a tab is called "Security Clearance". Click on it.
   
4. The classifications window appears. Place your cursor over a classification, these icons appear.
   
5. Click on the trash can to "Delete";
6. This window will appear to offer you to "Remove Security";
7. Click on "Remove Security" to remove the classification and remove the security that was assigned to the linked records.

3. Assign a security classification

3.1 Assign a security classification to a user

To assign this security classification, this always takes place in the Security Management page.

1. In the navigation menu, go to "Administration";
2. Then click on "Manage Security";
   
3. Under the "Users" tab, click on "Manage security clearance" of a user;
4. This window will appear. Click on the magnifying glass and choose the security level to assign to the user;
5. "Save" the changes. 

3.2 Assign a security classification to a group

To assign your security classifications, this takes place on the Security Management page.

1. In the navigation menu, go to "Administration";
2. Then click on "Manage Security";
   
3. Under the "Groups" tab, click on "Manage security clearance" of a group;
4. This window will appear. Click on the magnifying glass and choose the security level to assign to the group;
5. "Save" the changes.

4. View the "Security Classification" metadata

The "Security Classification" metadata is not automatically displayed in Constellio. If you want to display this information in your record creation form, follow these steps: 

1. In the navigation menu, click on "Administration";
2. Then go to "Metadata Schemas";
3. Click on the type of diagram of your choice;
4. In the hamburger menu, click on "Form configuration";
5. On the left, select the "Security Clearance levels" metadata and then move it to the right and then place it in the place of your choice;
6. "Save". The metadata will now appear in the form for creating the record of your choice.

5. Apply a security classification to a record

After you have created your security classification, it is possible to apply this classification as soon as it is created or modified.

5.1 Apply from creation

1. From the drop-down menu, click on the "Add a Folder" option;
2. Verify that the security classification metadata is present;
   

    

3. Fill in metadata;
4. "Save" the folder. The security classification is applied to the registration. 

5.2 Apply as a modification

1. Click on the record of your choice and then "Edit";
2. On the edit page, edit the "Security Classification levels" metadata; 
3. "Save". The security classification is applied to the registration.

6. Roles

To add the role of "Manage security clearance" and be able to create, edit, and assign these classifications, follow the next steps.

1. Go to "Pilotage";
2. Click on "Manage Roles";
3. In the "Manage roles", click on "Manage legal requirements" on the roles you want;
4. "Save".

7. Batch processing

It is possible to apply batch treatments on the security classification. Simply select folders that respect your metadata configuration in the form. To learn more about batch processing, see the article "Batch processing".