Configuring media access security for K2 bins

The permissions you set on a K2 bin restricts access to the media in the bin via AppCenter operations, via FTP, and via protocol control of channels.

You can set permissions on a K2 bin as follows:

Write — Allow access to rename or delete any of the clips located in the bin.
Delete — Allow access to delete any of the clips located in the bin.
Read — Allow access to the clips located in a bin, but deny the ability to modify the clips.
List Bin Contents — Allow or deny access to explore the contents of the bin. This permission also controls access to transfer clips in/out of the bin and to perform search operations on the bin.
Full Control — Allow or deny all of the above permissions plus the ability to modify the permissions on a bin.

As you configure permissions, take the following into account:

In case of conflicts, the Deny permission always overrides the Allow permission.
Do not restrict access for the movie, mxfmovie, and video_fs accounts. These accounts are used for access by applications and modifying permissions can cause applications and transfers to fail. If your security policy requires restricting access to these accounts, contact Grass Valley Support.
By default, the “Everyone” group is set to Full Control, with all permissions allowed. When you create a new bin it has these default permissions applied automatically.
Avoid using the “Everyone” group to restrict permissions. Doing so causes some or all operations to fail, regardless of the account currently logged on.
The “system” user account must retain access to bins and files.
Never deny any permissions to the user NT AUTHORITY\System.
The user account that originally created a bin always retains the ability to modify permissions on that bin.

If you need to restrict access to a K2 bin that you have created, set up a media access control list on the bin, as instructed in the following procedure.

Make sure you are logged on to Windows and AppCenter with administrator privileges.
Create user accounts and bins as necessary to support your permission policies.
In the Clips pane, select the Current Bin drop-down list, then select Organize Bins. The Organize Bins dialog box opens.
Create a bin if necessary, or otherwise select the bin for which you are setting permissions and then click Permission. The Permission settings dialog box opens.
Note: You can not set permissions on the default bin or on the Recycle bin.
Add users and groups to the access control list and set permissions as follows:
1. Click Add. The Select Users or Groups dialog box opens. This is the standard Windows operating system interface to users and groups, so you can use standard Windows procedures. In the “Enter the object names…” box, you can enter the users or groups for which you want to set permissions, then click OK.
2. In the Permission settings dialog box, select a user or group and then set permissions as desired.
Click Apply, OK, and Close to save settings and close dialog boxes.