Disabling graphical interface functions

When configuring users and groups, you can disable functions that you do not want users to access. You can disable any of the graphical interface items on pop-up menus and buttons in the Client window, the session menu, and the session toolbar. For example, you can remove items such as Copy, Export Session, or Properties from the pop-up menu in the client window or the macro button from the toolbar in the session window. When a function is disabled, it is removed from the toolbar or menus so users do not see it. Functions cannot be accessed using the shortcut keys either.

You cannot reduce download size by disabling functions. For more information about reducing download size, refer to Preload Options.

Disabling functions is different from locking functions. You can lock the fields of a function when you are configuring a session. Locking fields locks the startup values for a session. In most cases, users cannot change values for those fields because the fields are unavailable. However, functions accessed from the session menu bar or tool bar can be changed.

You can enable or disable functions for a group or user in either one of two ways:

• From the Administration window:
  1. Click Users/Groups.
  2. Right-click a group or user and select Disable Function.
• From the Deployment Wizard:
1. Define a host session.
2. Click Disable Functions.

Changes made to a user's functions while the user is logged on do not become effective until the user has logged off and then logs back on.

Inheriting from a group (Administration client only)

Enabling and disabling functions can be set for each group and for each user within a group. A user or group can be configured to use, or inherit, the settings for functions from a higher (parent) group. However, settings for functions at the lower level groups or users take precedence over the higher level groups. In other words, if you disable a function at a group level but enable it for a user in that group, the function is enabled for only that user. Because of the inheritance factor, it is easier to set functions at the group level, and then disable or enable specific functions for the users or groups belonging to those higher level groups.

If you are using an LDAP server for storing configuration information, a user can be a member of only one group. If you select Inherit for a function, whatever is set for that group is applied to the user.

If you are using the Host On-Demand configuration server, a user can be a member of multiple groups. If you select Inherit, and all the groups to which the user is a member of have the function disabled, then the function is disabled for the user also. As depicted in the following figure, if at least one those groups has the function enabled, then the function is enabled for the user.

Related topic