System privilege suppression enables you to hide any of the system privileges from users. In so doing, you can prevent users from unintentionally granting these privileges to others. For example, you can suppress the Configure privilege so that users can not grant it to themselves or to other users, thereby protecting the application from unauthorized configuration.
VTS enables you to suppress and reveal system privileges from users in all security dialogs (such as the Add Account, Copy Account, Modify Account, and My Privileges dialogs) and including the Administrative Settings dialog. This is done using the SysPrivSuppress variable in the [SECURITYMANAGER- Admin] section of the SecurityManager.ini file.
• Setting the indexes representing the system privileges you wish to suppress to "1" hides the associated system privileges in all security dialogs except the Administrative Settings dialog (e.g. "SysPrivSuppress = 10000000000000000000000000000000000" indicates that the 35th system privilege (Internet Client Tools Access will be hidden); or
• Setting the indexes representing the system privileges you wish to suppress to a "2" hides the associated system privileges in all security dialogs (including the Administrative Settings dialog) (e.g. "SysPrivSuppress = 22222222222222222222222222222222222" indicates that the first 35 system privileges will be hidden).
Note: Additional system privileges continue to be added to VTS. You should not expect the number of privileges to remain constant in future versions.
For instructions on using the Administrative Settings dialog to suppress and reveal system privileges, please refer to "VTS Developer's Guide: Suppress System Privileges Using the Administrative Settings Dialog" or "VTS Developer's Guide: Reveal System Privileges Using the Administrative Settings Dialog".