Virtual paths are virtual file system paths that map to a physical path on your domain and have their own set of permissions. This allows you to have complete control over what resources users may access on your domain without having to manage users and permissions at the OS level. Virtual paths may be defined at the User, User Template or Group levels. Defining virtual paths at the Group or User Template level is recommended when you want to assign multiple users the same set of virtual paths.
Creating virtual paths for a User account
1. From the ACCOUNTS > Users > Users grid select the user you wish to define the virtual paths for and click the Edit button. The Edit User dialog is displayed.
Figure 236
2. Click on the Paths tab to see a list of virtual paths for this user, as depicted in figure 134.
Figure 134
By default, one virtual path is automatically created when you add a new user. You will see this virtual path in the Paths tab, as depicted in figure 134. It is the "root path", where the Path field is set to "/" (indicating it's the root) and the Real path field is set (by default) to "%installdir%/users/%domain%/%username%". The default Real path is comprised of mainly variables (except for "users"). You can find a description of the variables at the bottom of the page in the Variables section. By default, the root path is the only directory on the MFT Server that the user would have access to (and its subfolders, if any) - unless you add additional virtual paths for the user. The virtual paths can point to additional real path's on the MFT Server, and/or they can point to different systems using network storage options.
To add a new virtual path, click on the Add button in the Paths tab. The Add Virtual Path dialog will appear, as depicted in Figure 42.
Figure 42
Path - The virtual path that will be made available to the User account. Virtual paths should always start with a slash / character. For example a valid virtual path might be /docs
Real path - The real path on your domain that this virtual path maps to.
Network Storage - If you are mapping this path to a network storage then select it here.
Create directory if not found - Creates directory on server if not found when accessed by user.
Include in search index - If checked files in directory will be indexed for search purposes.
Permissions - Check the permissions that this user will be granted for the virtual path.
3. To finish, click OK. Your new virtual path will be displayed in the virtual path listing for the user account.
Creating virtual paths for a Group
When creating a virtual path for a group, all users who are members of the group will have access to the virtual path.
1. From the ACCOUNTS > Groups module select the group you wish to define the virtual paths for and click the Edit button. The Edit <group name> Group dialog is displayed, as depicted in the image below..
Figure 43
2. A list of virtual paths (if any) is displayed at the center of the screen (under the PATHS heading) for this group. To add a path, click the Add button.
Figure 191
Path - The virtual path that will be made available to the User account. Virtual paths should always start with a slash / character. For example a valid virtual path might be /docs
Real path - The real path on your domain that this virtual path maps to.
Network Storage - If you are mapping this path to a network storage then select it here.
Create directory if not found - Creates directory on server if not found when accessed by user.
Include in search index - If checked, files in directory will be indexed for search purposes.
PGP encrypt uploads - Files uploaded to this directory will be automatically PGP encrypted using specified key.
Enable DLP - Files downloaded from this directory are subject to DLP rules.
Secured - If checked, this directory may only be accessed using secure protocols (FTPS, SFTP, HTTPS etc.).
Denied - If checked, this directory may not be accessed. This option is typically used to override the behavior of a parent directory, where access to parent directory is granted but access to this sub-directory is denied.
Permissions - This is where you specify the permissions that this user will be granted for the virtual path.
3. To finish, click OK. Your new virtual path will be displayed in the virtual path listing for the Group.
Variables may be used in Path and Real Path fields for purposes of creating dynamic paths. Available variables are described below.
installdir - The absolute path of MFT Server installation directory.
domain - The domain that this user/group belongs to.
sessionid - Unique session ID for the user. This ID is unique for each login.
username - The username of connected user (the Login field assigned to the user at the time of creation).
group - The optional group name that this user belongs to. Note, this variable is deprecated and is provided only for backwards compatibility. Users may belong to more than one group. This variable will return only the first group that user belongs to if found.