西雙版納傣族自治州會(huì)計(jì)繼續(xù)教育網(wǎng)：Excel2007新知-Excel服務(wù)VIII——控制和保護(hù)數(shù)據(jù)表

高頓網(wǎng)校友情提示，*7西雙版納傣族自治州會(huì)計(jì)繼續(xù)教育網(wǎng)上總結(jié)信息Excel2007新知-Excel服務(wù)VIII——控制和保護(hù)數(shù)據(jù)表等內(nèi)容公布如下：　　Excel Services part 8: Controlling and protecting spreadsheets

　　To this point in my discussion of Excel Services, I have written primarily about the user-facing part of Excel Services - all the things customers can do with Excel Web Access and Excel Web Services in order to execute and interact with workbooks on the server.  In the next two posts, I plan to cover some of the security aspects of Excel - how customers who deploy Excel Services can “lock down” and protect key spreadsheets.

　　在我以前的有關(guān)Excel服務(wù)的論述中，我主要介紹過(guò)Excel服務(wù)的用戶界面部分——用戶可以利用Excel Web Access和Excel Web服務(wù)完成這些操作，使得數(shù)據(jù)表在服務(wù)器上與工作簿相互結(jié)合。在下兩篇文章中，我打算介紹一些Excel安全方面的知識(shí)——配置Excel服務(wù)的用戶怎樣才能“鎖定”和保護(hù)關(guān)鍵數(shù)據(jù)表。

　　In my overview of Excel Services, I mentioned that a request that we frequently hear from customers is the ability to limit access to spreadsheets either for regulatory and audit concerns or to protect proprietary information in spreadsheets.  To address this requirement, one of the main things that we've done (in addition to allowing users to execute and view spreadsheets on the server) is extended the Windows SharePoint Services (SharePoint) architecture with a new “right”, which we call a the “View Item” right.

　　在我的“Excel服務(wù)概覽”這篇文章里，我提到過(guò)，用戶經(jīng)常給我們提出這樣一個(gè)要求，要求我們提供限制訪問(wèn)數(shù)據(jù)表的功能，例如：管理和審核利害關(guān)系或者保護(hù)專有信息。為了達(dá)到這個(gè)要求，我們所做的主要事情就是給Windows SharePoint服務(wù)體系增加一個(gè)“權(quán)限”（除了允許用戶在服務(wù)器上訪問(wèn)和查看數(shù)據(jù)表），我們把它叫做“查看項(xiàng)目”權(quán)限。

　　Before I get into exactly what the View Item right is, let me give a bit of background on what SharePoint is, and how it relates to Excel Services.  As I've mentioned in previous posts, Excel Services is built as part of the SharePoint products and technologies platform.  For the context of this conversation on the View Item right, consider SharePoint as a document store on the server – users can save and version files, administrators can control access permissions, etc., all via any browser  (Note, SharePoint does *a lot* more than this - in addition to being a document store, SharePoint provides many more features which you can read about here).

　　在我還沒(méi)有深入介紹什么是查看項(xiàng)目權(quán)限之前，讓我先簡(jiǎn)單的介紹一下什么是SharePoint，它是怎樣和Excel服務(wù)發(fā)生聯(lián)系的。正如我在前面的文章中提到，Excel服務(wù)是基于SharePoint產(chǎn)品和技術(shù)平臺(tái)的一部分。為了便于理解查看項(xiàng)目權(quán)限，在這里我們把SharePoint看作服務(wù)器上的一個(gè)文檔庫(kù)——用戶可以保存和修改文件，管理員可以控制訪問(wèn)權(quán)限等等，所有這些通過(guò)任何一個(gè)瀏覽器都能實(shí)現(xiàn)（注：SharePoint還可以做更多的事情——除了作為一個(gè)文檔庫(kù)之外，SharePoint還提供更多的功能，你可以看這里）

　　Currently, SharePoint administrators can give users “Reader” rights (look at content), “Contributor” rights (look at, change, and add to content), or “Administrator” rights (full control).  One way to think of this is similar to a regular file system and the file access rights that can be set (e.g. read only, read/write etc.)

　　通常，SharePoint管理員可以給用戶“閱讀”權(quán)限（查看內(nèi)容），“投稿”權(quán)限（查看、修改和添加內(nèi)容），或者“管理”權(quán)限（完全控制）。咋一看這與正式的文件系統(tǒng)很相似，可以設(shè)置文件的訪問(wèn)權(quán)限（例如只讀、讀/寫(xiě)等等）。

　　With the View Item right that we are adding, customers can lock down spreadsheets that have been published to SharePoint (this right is specific to SharePoint document libraries and does not work with workbooks stored in UNC shares or generic HTTP locations) such that users can open the spreadsheets using Excel Services, interact with the workbooks, and see the execution results, but can't download a copy of the spreadsheet, or access any areas that were not published as viewable on the server.  This hides any proprietary information contained within the book - specific formulas, the proprietary model, the external data connections, and hidden elements of the book - all of these things become inaccessible to users.

　　由于查看項(xiàng)目權(quán)限的添加，用戶可以鎖定已經(jīng)發(fā)表到SharePoint的數(shù)據(jù)表（這個(gè)權(quán)限是SharePoint文檔庫(kù)特有的，它與存儲(chǔ)在UNC共享或者普通HTTP域的工作簿不同），這樣，用戶可以通過(guò)Excel服務(wù)打開(kāi)數(shù)據(jù)表，與工作簿相互作用，可以看到執(zhí)行的結(jié)果，但是不能下載數(shù)據(jù)表的副本，并且不能訪問(wèn)服務(wù)器上任何非可見(jiàn)區(qū)域。這里隱藏了文檔里的專有信息——特殊公式、專有模型、外部數(shù)據(jù)連接和文檔的隱藏單元——所有這些東西用戶都無(wú)法接觸。

　　Let's look at some examples of how View Item can be used in an Excel Services solution.  Imagine a workbook that takes several inputs, and then calculates discount rates for a large retailer.  The discount rate for any specific distributor is dependant on many factors - what quantity of product is purchased, the time of year, and the number of previous transactions for a given distributor - and of course, this discount rate formula is carefully guarded by the retailer since it determines the profit made on each transaction.  With Excel Services, this retailer can now allow distributors View Item right to the workbook containing this sensitive model, without having to worry that they will actually be able to download or see the model.

　　讓我們來(lái)看看查看項(xiàng)目在Excel服務(wù)中應(yīng)用的一些例子。假設(shè)某個(gè)工作簿里有若干錄入數(shù)據(jù)，然后要為一個(gè)大零售商計(jì)算折扣率。無(wú)論哪個(gè)批發(fā)商的折扣率都是決定于很多因素——產(chǎn)品購(gòu)買(mǎi)量、時(shí)間、既定批發(fā)商以前的交易量——當(dāng)然，零售商會(huì)小心的控制折扣率公式，因?yàn)樗鼪Q定著每一筆交易所獲得的利潤(rùn)。利用Excel服務(wù)，零售商可以允許批發(fā)商擁有這個(gè)工作簿的查看項(xiàng)目權(quán)限，并限制敏感的模型，所以零售商不必?fù)?dān)心批發(fā)商能夠下載或看到模型。

　　The View Item right affects how both Excel Web Access and the Excel Web Services allow access to a workbook.. Let's look at the specific elements that are affected:

　　查看項(xiàng)目權(quán)限影響著Excel Web Access和Excel Web服務(wù)訪問(wèn)工作簿的方式。讓我們來(lái)看看具體的影響因素：

　　1. Which portions of the workbook can be accessed by a user:  When a user only has the View Item right, they can only see the portions of the workbook that have been marked as viewable on the server during the publish process.

　　1、工作簿的哪個(gè)部分能被用戶訪問(wèn)：當(dāng)該用戶只有查看項(xiàng)目權(quán)限時(shí)，那么他就只能看到工作簿的可見(jiàn)部分。

　　View Item right prevents users from seeing ranges that were not marked as viewable during publish

　　查看項(xiàng)目權(quán)限阻止用戶查看非可見(jiàn)區(qū)域

　　2. Which portions of the workbook can be opened in Excel:  While users with the Reader right can always open the original workbook in Excel if they want to see the model/formulas/data connections/etc., users with the View Item right can only open a snapshot of the original workbook in Excel.  A snapshot is much like what you would get with a copy/paste values and formatting, so that the user can see the numbers, but none of the proprietary information behind those numbers (formulas, connections, etc.), since that information is not contained in the snapshot.  And, of course, they can only see the numbers for the portions of the workbook that were marked as visible on the server.

　　2、工作簿的哪個(gè)部分能在Excel里打開(kāi)：擁有閱讀權(quán)限的用戶，如果想要看到模型/公式/數(shù)據(jù)連接等等，他們可以在Excel中打開(kāi)原工作簿；擁有查看項(xiàng)目權(quán)限的用戶在Excel中只能打開(kāi)原工作簿的瞬態(tài)圖。瞬態(tài)圖就像復(fù)制/粘貼數(shù)值和格式得到的結(jié)果一樣，所以用戶只看到數(shù)字，而在這些數(shù)字后面并沒(méi)有專有信息（公式、連接等等），也就是說(shuō)瞬態(tài)圖不包含這些信息。當(dāng)然，他們只能看到工作簿可見(jiàn)部分的數(shù)據(jù)。

　　Workbook contains formulas and other proprietary information

　　工作簿包含公式和其他專有信息

　　Snapshot contains only the numerical values and formatting

　　瞬態(tài)圖只包含數(shù)值和格式

　　These examples focus on accessing the spreadsheet through the browsing using Excel Web Access (the browser).  Similarly, if an application accesses the spreadsheet through Excel Web Services, the View Item right is enforced.  For example, issuing a “GetRangeA1” call to a range that has not been marked as viewable will result in an exception, as will “GetWorkbook”.

　　這些例子集中在通過(guò)Excel Web Access（瀏覽器）訪問(wèn)數(shù)據(jù)表。同樣的，如果某個(gè)應(yīng)用程序通過(guò)Excel Web服務(wù)訪問(wèn)數(shù)據(jù)表，那么查看項(xiàng)目權(quán)限是被強(qiáng)制執(zhí)行的。例如，發(fā)布一個(gè)“GetRangeAl”作為沒(méi)有標(biāo)記為可見(jiàn)的區(qū)域，那么就會(huì)導(dǎo)致出現(xiàn)異常，同樣也會(huì)發(fā)生在“GetWorkbook”上。

　　That sums up how users can lock down spreadsheets to protect proprietary information/ensure everyone is looking at the latest sanctioned version using the new View Item right within SharePoint.  Next, more about some of the security functionality that we've built into Excel Services - how Excel Services decides whether or not to execute a workbook, how it connects to external data sources, and how it integrates with some of the other security features in SharePoint like versioning, IRM, and document approval.

　　這篇文章概括了用戶怎樣鎖定數(shù)據(jù)表以保護(hù)專有信息/怎樣利用SharePoint里的查看項(xiàng)目權(quán)限保證每個(gè)人正在看的是*7的標(biāo)準(zhǔn)版本。下次，介紹一些Excel服務(wù)安全性的知識(shí)——Excel服務(wù)怎樣判斷是否運(yùn)行工作簿，它怎樣連接外部數(shù)據(jù)源，它怎樣與SharePoint的其它安全特性（如版本、IRM、文檔證明）相結(jié)合。

 　　　　

　　掃一掃微信，學(xué)習(xí)實(shí)務(wù)技巧

　　高頓網(wǎng)校特別提醒：已經(jīng)報(bào)名2014年財(cái)會(huì)考試的考生可按照復(fù)習(xí)計(jì)劃有效進(jìn)行！另外，高頓網(wǎng)校2014年財(cái)會(huì)考試高清課程已經(jīng)開(kāi)通，通過(guò)針對(duì)性地講解、訓(xùn)練、答疑、?？迹瑢?duì)學(xué)習(xí)過(guò)程進(jìn)行全程跟蹤、分析、指導(dǎo)，可以幫助考生全面提升備考效果。