Managing parameters with associated rights

Manage parameter access rights in VHQ with role-based restrictions, sensitive value masking, and support for POINT Format across multiple containers.

Keywords

Also called: parameter access rights, MaskValue. Search terms: masked parameter, POINT format.

What are parameter access rights?

In VHQ, parameter rights restrict viewing or editing parameters based on the access level defined in the parameter form view file. This lets you hide or show parameters for specific users. Beyond hiding, showing, or allowing edits, VHQ can also restrict a parameter's displayed value, even for users with view access.

If a parameter value is a password, other users can't see it, even if they have view or edit access.

Masking parameter values

A MaskValue attribute, next to the Access attribute in VPFX XML, controls masking. If set to True (case-insensitive), the parameter value is masked with asterisks (*****); if False, it's unmasked.

A user with add permission can define and add a value to the parameter regardless of masking. A user with modify permission can edit the value and restore it to default, but can't see the modified value — that's the expected masking behavior. Masked parameters can't be deleted.

• Users can't copy a masked value.
• Masking only applies to parameters with a String value type.
• If MaskValue isn't set to a valid Boolean in the form view XML, it defaults to unmasked, and the form file upload is rejected with Invalid file format.

POINT Format support

POINT Format support is a newer feature that manages multiple containers with a single XML file, reducing multiple downloads to one.