2.4. Documenting the Site Survey
Table 2.4. Example: Tabulating Data Ownership and Access
|Data Name||Owner||Supplier Server/Application||Self Read/Write||Global Read||HR Writable||IS Writable|
|Employee name||HR||PeopleSoft||Read-only||Yes (anonymous)||Yes||Yes|
|User password||IS||Directory US-1||Read/Write||No||No||Yes|
|Home phone number||HR||PeopleSoft||Read/Write||No||Yes||No|
|Employee location||IS||Directory US-1||Read-only||Yes (must log in)||No||Yes|
|Office phone number||Facilities||Phone switch||Read-only||Yes (anonymous)||No||No|
- Owner. Human Resources owns this information and therefore is responsible for updating and changing it.
- Supplier Server/Application. The PeopleSoft application manages employee name information.
- Self Read/Write. A person can read his own name but not write (or change) it.
- Global Read. Employee names can be read anonymously by everyone with access to the directory.
- HR Writable. Members of the human resources group can change, add, and delete employee names in the directory.
- IS Writable. Members of the information services group can change, add, and delete employee names in the directory.