═══ 1. Introduction ═══ Workplace Security for OS/2 Warp is one of the new generation of object oriented software products based on System Object Model (SOM) technology. Unlike traditional software applications which must be started in order to use them, Workplace Security integrates seamlessly into OS/2 Warp's Workplace Shell user interface. You never have to start it or stop it, it's always there and it's always working. Workplace Security provides password controlled access to protect your desktop objects from being deleted, renamed, moved, copied, dragged, or from receiving dropped objects. Workplace Security prevents locked objects from being opened or having their settings changed without entering the correct password. Locked objects can be identified by a lock that is displayed over the objects icon. To unlock an object, double click on the object or select the Unlock item from the menu. A password popup dialog will prompt you for the correct password. ═══ 2. Desktop Protection ═══ Workplace Security prevents Locked objects from being opened or having their settings changed without entering the correct password. In addition, locked objects cannot be:  Deleted  Renamed  Moved  Copied  Dragged  Receive dropped objects The common menu items associated with the desktop, folder and program objects are removed from an objects menu when the object is locked, leaving only the Settings and Unlock menu items. When the object is unlocked, all menu items are restored. See the section Controlling menu items for more information about selectively controlling the display of special menu items. Folders that you might want protected from unauthorized access or tampering may include:  Desktop Settings notebook  Any folder containing private documents  System Setup  System Startup  Drives folder Program objects that you might want protected from unauthorized access or tampering may include:  OS/2 Window/Fullscreen  DOS Window/Fullscreen  OS/2 Programs  DOS Programs  Seamless Windows programs  Program objects on the launch pad Places where Workplace Security is important:  PC's running Warp in a public place  When a PC running Warp is shared by many users  School classrooms or Labs  Computer retail stores running Warp on demo PC's ═══ 3. Security Controls ═══ After installing Workplace Security a new Password page is seamlessly added to the settings notebook for every program object and folder object on your desktop, including the desktop settings notebook. Folder objects that can be password protected include:  The Desktop  All standard folders  Minimized Viewer  Templates  Drives Folder  Startup Folder  IBM Information Superhighway  Light Tables Any program object including:  OS/2 Window/Fullscreen  DOS Window/Fullscreen  OS/2 Programs  DOS Programs  Seamless Windows programs  Program objects on the launch pad ═══ 3.1. Desktop and folder objects password page ═══ To add password protection to an object, select the settings notebook for that object, click on the Password page, then enter a password that will be required to unlock the object whenever the object is locked. All passwords are encrypted for maximum security. The Password page for the desktop and folder objects have the following options. New password Enter a password from 1 to 15 characters in this field. The password can be either upper or lower case. The password is not case sensitive. Special characters including spaces are accepted. Verify password Enter the same password as was entered in first password field. The password must match the password entered in the first password field or an error is displayed. Allow open when locked By selecting this check box, Workplace Security will allow the locked folder object to be opened but remain protected from being deleted, moved, copied, or from accessing it's setting notebook without entering the correct password. Automatically lock when closed By selecting this check box, Workplace Security will automatically lock the folder object when the folder object is closed. Display Locked icon By selecting this check box, Workplace Security will display a Lock over the objects icon when the object is locked. When the object is unlocked it will return to its normal icon. This option is checked by default. Protect contents By selecting this check box, all the objects within the desktop or folder will be protected from being deleted, renamed, moved, copied, dragged, or from receiving dropped objects. In addition, the open settings option will not be available for any non-folder type objects within the desktop or folder. Deselect this checkbox option to remove this protection. Note: Shadow objects always reflect the protect status of the real object. Therefore this option has no effect on shadowed objects within the desktop or folder.  Set Press the Set button to set or change the objects password. The password must be entered in both password entry fields. If the password typed in both fields do not match, a message stating that the passwords do not verify will be issued. When the passwords match, a message indicating that the password has been accepted is issued and the password is set for the object. Once set, this password must be used to unlock the object the next time it is locked.  Undo Press the Undo button to remove password protection for the object. The "lock" item will no longer be displayed in the objects context menu.  Default Press the Default button to restore any default options.  Help This push button present this help panel. ═══ 3.1.1. Desktop password page 2 ═══ The desktop settings notebook has a second Password page for setting Workplace Security global options and selectively controlling which menu items are displayed in the desktops menu, when the Desktop is locked. Lockout at system startup Select this option to display the the desktop password dialog when the system is started. The desktop will not start until the correct password it entered. Master password required to access settings notebooks Select this global option to require the master password to access the desktop, folder, or program objects settings notebook. The master password will be required whether or not the object is locked. Enable lock/unlock event sounds Select this global option to play the UNLOCK.WAV or LOCK.WAV file located in the d:\WPSECURE directory when any object is locked or unlocked. These files may be replaced with other WAV files if desired. ═══ 3.2. Program objects password page ═══ To add password protection to an object, select the settings notebook for that object, click on the Password page, then enter a password that will be required to unlock the object whenever the object is locked. All passwords are encrypted for maximum security. The password page for Program objects have the following options. New password Enter a password from 1 to 15 characters in this field. The password can be either upper or lower case. The password is not case sensitive. Special characters including spaces are accepted. Verify password Enter the same password as was entered in first password field. The password must match the password entered in the first password field or an error is displayed. Allow open when locked By selecting this check box, Workplace Security will allow the locked object to be opened but remain protected from being deleted, moved, copied, or from accessing it's setting notebook without entering the correct password. Automatically lock when closed By selecting this check box, Workplace Security will automatically lock the object when the object is closed. The object will only be locked if it was locked at the time it was opened. Display Locked icon By selecting this check box, Workplace Security will display a Lock over the objects icon. When the object is unlocked will return to its normal icon. This option is checked by default.  Set Press the Set button to set or change the objects password. The password must be entered in both password entry fields. If the password typed in both fields do not match, a message stating that the passwords do not verify will be issued. When the passwords match, a message indicating that the password has been accepted is issued and the password is set for the object. Once set, this password must be used to unlock the object the next time it is locked.  Undo Press the Undo button to remove password protection for the object. The "lock" item will no longer be displayed in the objects context menu.  Default Press the Default button to restore any default options.  Help This push button present this help panel. ═══ 3.3. Controlling menu items ═══ The common menu items associated with the desktop and folder objects are removed from an objects menu when the object is locked, leaving only the Settings and Unlock menu items. When the object is unlocked, the menu items are restored. These common menu items include:  Arrange  Open  Open parent  Create Another  Create Shadow  Copy  Delete  Find  Help  Move  Pickup  Select  Sort The desktop settings notebook has a second password page for selectively controlling which menu items are displayed in the desktops menu. Any of these menu items can be selectively controlled.  Refresh  Lockup now  Shut down  Lockout ═══ 3.4. Controlling access to the FIND object ═══ Selecting the Find object or Find launchpad button will display the Desktop's password dialog when the Desktop is locked. The Desktop's password or the master password must be entered to access the Find object when the desktop is locked. The Find menu item is removed from all folder objects when the desktop is locked. ═══ 3.5. Desktop Lockout ═══ The Lockout function provides an alternative to the built-in Lockup function. The Lockout function displays a password dialog that cannot be exited until the correct desktop password is entered. When the Lockout function is active, all desktop objects are inaccessible. The Lockout function can be invoked at system startup by selecting the Invoke Lockout at System startup option from Password page 2 of the Desktop settings notebook. See the section Controlling menu items to add or remove the Lockout Desktop menu item. ═══ 3.6. Locking an object ═══ Once a password has been set, a Lock item will appear in the objects context menu when you click the right mouse button on the object. To lock the object, click on the Lock item in the menu. When the object is locked, an Unlock item will appear in the menu. Selecting the Lock menu item will close all open views of a folder object. Check the Allow open when locked option on the objects settings notebook Password page to prevent an object's open views from closing when the Lock menu item is selected. ═══ 3.7. Unlocking an object ═══ To unlock an object, either double click on the object or select the Unlock item from the menu. A password popup dialog will prompt you for the correct password. If an incorrect password is entered, an access denied message is displayed. All locked objects can be unlocked using the master password MASTER in the unregistered version of the product. ═══ 3.8. Master Password ═══ Workplace Security supports a master password that can be set from the Workplace Security registration utility. The master password provides an additional level of control in the event an objects password is lost or forgotten. The master password can be held by support personnel, or group responsible for security in your organization. Any locked object can be opened using the master password. The master password is set to MASTER in the unregistered version of Workplace Security and cannot be changed until the product is registered. The master password is also used by the WPSSETUP.CMD utility to automate Workplace Security setup. ═══ 3.9. Automating Security Setup ═══ Workplace Security setup can be automated using Rexx command scripts. See the WPSSETUP.CMD utility that was shipped with the product. Tailor this utility to meet your setup requirements.The WPSSETUP.CMD utility requires the master password to change an objects security settings. Therefore, it will only work after the product has been registered and a master password has been set. The following example sets the OS/2 System folder password to NEWPASS, and selects the "Automatically Lock When closed" and "Display Locked Icon" options. /* Rexx Command script example */ Call RxFuncAdd 'SysLoadFuncs', 'REXXUTIL', 'SysLoadFuncs' Call SysLoadFuncs ObjectID = "" /* Object ID for the OS/2 System folder */ password = "NEWPASS" /* Set new password */ master = "MASTER" /* Master password required to change settings */ SetupString = "AUTOLOCK=YES;LOCKICON=YES;PASSWORD="password";MASTER="master Result = SysSetObjectData(ObjectID, SetupString) Exit Result The following table shows the security setup string keynames common to the Desktop, Folder, and Program objects Password page. ┌───────────────┬───────────────┬───────────────────────────────────┐ │MASTER │master password│Specify the correct master │ │ │ │password. The master password is │ │ │ │required to change any Workplace │ │ │ │Security settings │ ├───────────────┼───────────────┼───────────────────────────────────┤ │PASSWORD │password │Specify the new password for the │ │ │ │object. 1 to 15 characters. │ ├───────────────┼───────────────┼───────────────────────────────────┤ │LOCK │YES │Locks the object. │ ├───────────────┼───────────────┼───────────────────────────────────┤ │ │NO │Unlocks the object. │ ├───────────────┼───────────────┼───────────────────────────────────┤ │ALLOWOPEN │YES │Selects the "Allow Open when │ │ │ │Locked" checkbox │ ├───────────────┼───────────────┼───────────────────────────────────┤ │ │NO │Deselects the "Allow open when │ │ │ │locked" checkbox │ ├───────────────┼───────────────┼───────────────────────────────────┤ │AUTOLOCK │YES │Selects the "Automatically lock │ │ │ │when closed" checkbox │ ├───────────────┼───────────────┼───────────────────────────────────┤ │ │NO │Deselects the "Automatically lock │ │ │ │when closed" checkbox │ ├───────────────┼───────────────┼───────────────────────────────────┤ │LOCKICON │YES │Selects the Display lock over icon │ │ │ │checkbox │ ├───────────────┼───────────────┼───────────────────────────────────┤ │ │NO │Deselects the Display lock over │ │ │ │icon checkbox │ └───────────────┴───────────────┴───────────────────────────────────┘ This table shows the security setup string keynames unique to the Desktop and Folder objects Password page. ┌───────────────┬───────────────┬───────────────────────────────────┐ │PROTECT │YES │Selects the "Protect Contents" │ │ │ │checkbox │ ├───────────────┼───────────────┼───────────────────────────────────┤ │ │NO │Deselects the "Protect Contents" │ │ │ │checkbox │ └───────────────┴───────────────┴───────────────────────────────────┘ This table shows the security setup string keynames for the Desktop's Password page 2. ┌────────────────────┬──────────┬───────────────────────────────────┐ │REFRESHMENUITEM │YES │Adds the "Refresh" menu item to the│ │ │ │Desktop menu │ ├────────────────────┼──────────┼───────────────────────────────────┤ │ │NO │Removes the "Refresh" menu item │ │ │ │from the Desktop menu │ ├────────────────────┼──────────┼───────────────────────────────────┤ │SHUTDOWNMENUITEM │YES │Adds the "Shut down" menu item to │ │ │ │the Desktop menu │ ├────────────────────┼──────────┼───────────────────────────────────┤ │ │NO │Removes the "Shut Down" menu item │ │ │ │from the Desktop menu │ ├────────────────────┼──────────┼───────────────────────────────────┤ │LOCKUPMENUITEM │YES │Adds the "Lockup now" menu item to │ │ │ │the Desktop menu │ ├────────────────────┼──────────┼───────────────────────────────────┤ │ │NO │Removes the "Lockup now" menu item │ │ │ │from the Desktop menu │ ├────────────────────┼──────────┼───────────────────────────────────┤ │LOCKOUTMENUITEM │YES │Adds the "Lockout" menu item to the│ │ │ │Desktop menu │ ├────────────────────┼──────────┼───────────────────────────────────┤ │ │NO │Removes the "Lockout" menu item │ │ │ │from the Desktop menu │ ├────────────────────┼──────────┼───────────────────────────────────┤ │LOCKOUT │YES │Selects the "Lockout on system │ │ │ │startup" checkbox │ ├────────────────────┼──────────┼───────────────────────────────────┤ │ │NO │Deselects the "Lockout on system │ │ │ │startup" checkbox │ ├────────────────────┼──────────┼───────────────────────────────────┤ │MASTERACCESS │YES │Selects the "Master password │ │ │ │required to access settings │ │ │ │notebook" checkbox │ ├────────────────────┼──────────┼───────────────────────────────────┤ │ │NO │Deselects the "Master password │ │ │ │required to access settings │ │ │ │notebook" checkbox │ └────────────────────┴──────────┴───────────────────────────────────┘ ═══ 3.10. Special Considerations ═══ Passwords for folders and objects are archived along with the rest of the OS/2 Desktop when the automatic Desktop archival feature is enabled in OS/2 Warp. Be aware that if the Desktop is restored from an archive, passwords and the condition of the object, either locked or unlocked, will return to their state at the date and time of the archive. If the desktop or system is restored, you may need to use the master password to unlock any objects if the password is no longer known. It may be necessary to run the Workplace Security registration utility if after restoring the desktop the product is no longer registered, assuming that the product had been registered. If for some reason the master password becomes unknown, run the registration utility to set a new master password. The master password is set to MASTER in the unregistered version of the product and cannot be changed until you obtain a valid registration code. ═══ 4. Registration Utility ═══ When you register Workplace Security, you will receive a registration code that you can enter into the Workplace Security registration utility. Once a valid registration code is entered, the Master password dialog will be displayed allowing you to enter a new master password. You will need to use the master password to unlock any locked objects in the event the password becomes unknown. The unregistered version of Workplace Security displays a "Please register" reminder message anytime an object is successfully unlocked. You must click on the Ok button to dismiss this message. This reminder message is no longer displayed after the product is registered. To obtain a registration code, see Ordering Information. ═══ 5. Ordering Information ═══ Where to order Maple Valley Software Orders by mail and site license information. CompuServe online registration, download library. BMT Micro Telephone orders, fax orders, BBS and Internet sites. ═══ 5.1. Maple Valley Software ═══ See our Web site http://www.wilmington.net/bmtmicro/wpsecurity Maple Valley Software accepts orders by direct mail with check, money order, or purchase order. All direct mail orders receive a 3.5" product diskette and registration code. To order, fill out and mail the ORDER.DOC form to Maple Valley Software. A single user license is $25.00 US dollars. Site licenses are available directly from Maple Valley Software. Registered users receive free upgrades and product support. Contact Information.  Fax: (612) 493-5485  America Online: MVSoft (MVSoft@aol.com)  Compuserve: 75131,1546@compuserve.com ═══ 5.2. CompuServe Online Registration, download Library. ═══ To register through Compuserve, GO SWREG. Follow the instructions for online product registration. The Workplace Security product registration id is: 4733. You will receive the registration code the same day. To obtain the latest version of Workplace Security, GO OS2SHARE, select the OS/2 Shareware library. Compuserve online registrations receive only the registration code. To receive a product diskette, see Direct Mail Orders ═══ 5.3. BMT Micro Telephone and Fax orders, Internet sites. ═══ BMT Micro accepts orders by voice, fax, modem, with credit card. BMT Micro accepts Visa, Mastercard, Discover, American Express, EuroCard, and Optima credit cards. BMT Micro phone numbers. Voice orders taken: 8am - 8pm EST (-5 GMT) (800) 414-4268 (Orders only) (910) 791-7052 (Orders, questions) (910) 350-2937 ( Fax orders) (910) 350-8061 (10 line BBS - 24 hour online ordering) BMT Micro internet: View BMT Micros Online Software Catalog, download the latest version of Workplace Security, or Order products online directly through the BMT Micro WWW home page. BMT Micro Web site - http://www.wilmington.net/bmtmicro/ ═══ 6. Product Support ═══ Registered users receive free upgrades and technical support. Product support is available through Compuserve, America Online, and the internet via E-mail. Send problem reports to Maple Valley Software at one of the following addresses.  America Online: MVSoft (MVSoft@aol.com)  Compuserve: 75131,1546@compuserve.com ═══ 7. License Agreement ═══ IF YOU DOWNLOAD OR USE THIS PROGRAM YOU AGREE TO THESE TERMS. Workplace Security for OS/2 Warp is not public domain, or freeware. It may be distributed freely, without modification of any kind, for the purpose of trying the product to determine if it meets your needs. You must purchase Workplace Security if you continue to use it beyond a 30 day trial period. Maple Valley Software grants purchaser and purchaser accepts a nontransferable and nonexclusive license to use, on a single computer, Workplace Security. Maple Valley Software shall have the right to terminate this license if purchaser violates any of its provisions. Purchaser agrees that Workplace Security and accompanying materials are the property of Maple Valley Software and that Maple Valley Software will maintain title to and ownership of Workplace Security at all times. Purchaser agrees to keep the registration code confidential at all times. Giving the registration code to others constitutes theft of the product and is in direct violation of the terms of this agreement. Maple Valley Software makes no warranties of any kind, expressed or implied, with respect to the quality, performance, accuracy, or fitness of Workplace Security for any particular purpose. Maple Valley Software assumes no responsibility for any decisions made or actions taken on the part of the purchaser because of the use of Workplace Security. In no event shall Maple Valley Software, or any of its representatives, be liable for any loss of profit or any other damages, including but not limited to special, incidental, consequential or other damages, arising out of the use or inability to use this product - even if Maple Valley Software or an authorized agent of such has been advised of the possibility of such damages - or for any claim by any other party. Maple Valley Software reserves the right to make changes, enhancements, and improvements to Workplace Security at any time and without notice. ═══ 8. Copyright Notices ═══ (C) Copyright Maple Valley Software 1995, 1996 All rights reserved (tm) Workplace Security is a trademark of Maple Valley Software (R) OS/2 and Warp are registered trademarks of International Business Machines Corporation.