Configuring policies

As an administrator, you can declare policies in D1 and assign them to repositories. Assigning a policy to a repository means that it's available for use on folders and contents inside this repository.

You can configure the following policies that are assigned on folders:

• Default policy - defines the type signature of the uploaded content.
• Restriction policy - restrict access to folders based on type signatures. Restriction policies are inclusive, meaning that only the types added to the policy are allowed in the folder where the policy is in effect.
• Inheritance policy - assigned on folders in D1 Explorer.

As a user, you can achieve the following goals by using policies:

• Set an inheritance policy on the folder level
• Set the default type signature for all contents uploaded to a folder
• Grant or deny access to a folder based on the type signature of the entry (content or folder).

Before you begin

Default Type policies and Type Restriction policies work based on custom type signatures. Therefore, if you want to use these policies, it's necessary to configure custom types first. For information about how to do this, see Configuring custom types for more information.

Videos version

Note that some of the UI components shown in the videos on this page might have changed as the videos were created based on a older version of the D1.

To configure inheritance policies

1. Create a policy in D1 Administrator. Use the available policy properties

   Inheritance policy property	Effect
   Name	Policy name
   Inherit ACL	All entries in a folder with this policy will inherit its Access Control settings
   Inherit Classification	At the momentAll entries in a folder with this policy will inherit its assigned classifications
   Inherit Common Properties	All entries in a folder with this policy will inherit property values for all common properties shared with the parent (if any)
   Inherit Policies	All entries in a folder with this policy will inherit the policies of the parent
   Inherit Tags	All entries in a folder with this policy will inherit the tags of the parent

2. Add the policy to a repository.

3. Synchronize the repository. Its policies can now be assigned to folders inside the repository.

4. Assign the policy to a folder.

The following video shows how to create and use inheritance policies:

To configure default type policies

1. Create the policy. Use the available policy properties

   Default Type policy property	Effect
   Name	Policy name
   Default Type	Type signature applied on entries affected by this policy
   Description	Policy description

   In the video, we're adding CustomContent as the Default Type.

2. Add the policy to a repository.

3. Synchronize the repository. Its policies can now be assigned to folders inside the repository.

4. Assign the policy to a folder. Contents added to this folder have the CustomContent type, despite the fact that we didn't assign any type on upload.

The video shows how to configure the default type policy:

To configure type restriction policies

1. Create the policy in Administration area. Use the available policy properties

   Type restriction policy property	Effect
   Name	Policy name
   Include Sub Types	When true, policy affects the sub-types of the added type signatures
   Allowed Types	Types explicitly allowed in folders where this policy is in effect
   Denied Types	Types explicitly denied from folders where this policy is in effect (this policy has priority in case of conflict with Allowed Types)
   Description	Policy description

2. Add the policy to a repository in D1 Administration Area.

3. Synchronize the repository. Its policies can now be assigned to folders inside the repository.

4. Assign the policy to a folder. Denied types can no longer access the folder.

The video shows the following steps:

API info

Policy management services are also exposed in D1 REST API. More information, including examples, is available under Working with policies with D1 REST API.