Navigation:  User Manual > Domains Management >

Domain Types

Previous pageReturn to chapter overviewNext page

From the domain management page, either while creating a new domain or editing an existing one, it is possible to define the Domain type; the available options are Open, Output Closed and Isolated. In this chapter the difference between the available domain types is described together with a detailed description of the impact of such selection on some system operations.

 

Open Domain - by leaving this default selection, the created/edited domain is open both inbound and outbound. This means that all materials created in the current domain can have a "public" scope and that the domain users' with enough permissions can search and see all materials created within their domain together with all materials created in other domains with "public" scope.
Output Closed Domain - by selecting the Output Closed option it is possible to create a domain where all created and published materials cannot be shared with the overall system. In this case it is still possible to display materials published in other domains whose scope has been set to "public" by the material's owner.
Isolated Domain - by selecting the Isolated option it is possible to create a domain where all created and published materials cannot be shared with the overall system and it is only possible to display the list of materials whose owner is part of the domain.

 

To preserve the domain's closure policy, it is not possible to create an "open domain" as child of a closed one. Starting from a closed domain it is only possible to create output closed or isolated child domains. By default the "root" domain is an open domain; this feature cannot be edited.

 

Impact on materials' management and visibility

The domain types has a different impact on the possible operations that users with different roles and permissions are allowed to process on materials. These operations mainly refer to the list of materials a user is allowed to display while searching the DR and on the actions allowed on those materials (edit, delete, update, etc). The two following tables summarize the allowed operations on materials for users with different roles inside the different types of domain (R indicates the material's visibility for a specific user while W stands for the possibility to work on the material).  

 

Domain Type

Open - Output Closed

 

Role

Notes

System Admin

Domain Admin

Author

Materials' features

 

 

 

 

Public material

R/W

R

R

 

Owned material

R/W

R/W

R/W

 

Any task assigned on a material

R/W

R

R

 

DEV task assigned on a material

R/W

R/W

R/W

 

Workflow assigned in a domain project

R/W

R/W

 

 

Tagged in a project where a user is member

R/W

R/W

R/W*

* related to the permission "Can update material tagged in a project"

Tagged in a domain project

R/W

R/W

 

 

Tagged in the domain

R/W

R/W

R

 

Material's owner is member of the domain

R/W

R/W

 

 

Material's owner is ONLY member of the domain

R/W

R

 

 

 

Domain Type

Isolated

 

Role

Notes

System Admin

Domain Admin

Author

Materials' features

 

 

 

 

Public material

R/W

 

 

 

Owned material

R/W

R/W

R/W

 

Any task assigned on a material

R/W

R

R

 

DEV task assigned on a material

R/W

R/W

R/W

 

Workflow assigned in a domain project

R/W

R/W

 

 

Tagged in a project where a user is member

R/W

R/W

R/W*

* related to the permission "Can update material tagged in a project"

Tagged in a domain project

R/W

R/W

 

 

Tagged in the domain

R/W

R

R

 

Material's owner is member of the domain

R/W

R/W

 

 

Material's owner is ONLY member of the domain

R/W

R

 

 

 

Attention: the system administrator has both read and write permissions on all materials regardless of the type of domain he/she's working in. System administrators should pay attention not to process actions on materials that may violate the domain's closure level.

 

Impact on users' management and visibility

The domain type also has a significant impact on users' management and visibility, mainly for Domain administrators.

A user with the domain administrator role assigned will have the following permissions on users regardless from the type of domain s/he is managing:

- Create users: any new user created by a domain admin just belongs to the specific domain where s/he has been created into.

- Search users: a domain admin is only allowed to display the list of all users belonging to the specific domain s/he' s managing.

- Assign roles: a domain admin is only allowed to assign roles to users belonging to the specific domain s/he's managing. Please note that a domain admin cannot assign roles including more permissions than those of the user himself. For more information on how to manage roles, refer to the User Roles section.