10.3 Protect Data

Use the Trust Center to protect your working environment from information theft, and your data from potential damage caused by opening documents from non-trusted sources.

What do you want to do?

See

Define locations from which you can safely open (and store) documents.

Configure Trusted Locations

Control access to the Reflection API and control the execution of actions invoked by a macro or API call.

Configure API and Macro Security

10.3.1 Configure Trusted Locations

A trusted location is a directory that is designated as a secure source for opening files. By default, InfoConnect allows users to open documents only in directories specified as trusted locations. The default trusted locations are the InfoConnect program directory, the user’s personal documents directory, and the InfoConnect user application data folder The default is \Users\username\AppData\Roaming\Micro Focus\InfoConnect\Desktop\v17.0 . .

To change the default trusted locations

  1. Open the InfoConnect Workspace Settings dialog box.

  2. Click Specify Trusted Locations.

    This opens the Specify Trusted Locations dialog box, which you can use to add additional trusted locations.

  3. Edit the trusted locations list and click OK. Changes you make using this dialog box are saved to the Application.settings file.

  4. Deploy the modified Application.settings file.

NOTE:To “lock down” these settings, see “Lock Down” InfoConnect To Restrict Access to Controls.

10.3.2 Configure API and Macro Security

Settings limiting API and macro functionality are available from the Workspace Settings dialog box.

To set up API and macro and security

  1. Start the InfoConnect Workspace and open the Workspace Settings dialog box.

  2. Under Trust Center, click Set Up API and Macro Security.

  3. Configure the API settings as follows:

    To

    Select

    Prevent custom applications from accessing this installation.

    Disable .Net API

    Determine if legacy macros are supported, and to determine which legacy API has preference for the GetObject() method used to retrieve API COM objects. (Reflection supports multiple APIs, but can accept GetObject() calls for only one type of legacy API object at a time.)

    Legacy API preference

  4. Under Action Permissions, specify what you want to happen if an action that has been restricted through Group Policy or the Permissions Manager is initiated through a macro or API call.

    To

    Select

    Control restricted actions with User Account Control (UAC).

    Require elevated rights

    Run restricted actions that are initiated through a macro or API call as expected. The same actions won't run if they are initiated through the user interface.

    Execute the action

  5. When you have finished configuring the API and macro security settings, click OK. Changes you make using this dialog box are saved to the Application.settings file.

  6. Deploy the modified Application.settings file.

NOTE:To “lock down” these settings, see “Lock Down” InfoConnect To Restrict Access to Controls.