DeviceLock Service : Managing DeviceLock Service for Windows : Permissions (Regular Profile) : Permissions Dialog Box : “Special Permissions” Rights Category
  
“Special Permissions” Rights Category
The rights in the “Special permissions” category apply only to iPhone, Windows Mobile, Palm and Clipboard device types. The content types (Calendar, Contacts, Tasks, etc.) controlled by these rights for iPhone, Windows Mobile, and Palm devices represent the same content types that exist in iTunes, HotSync, Microsoft ActiveSync and WMDC applications. For Palm devices, any Write right can be enabled only if the corresponding Read right is also enabled. The following rights are available in this category:
Read Calendar - Enables reading the calendar on a mobile device from a PC.
Write Calendar - Enables writing to a calendar on a mobile device from a PC.
Read Contact - Enables reading contacts on a mobile device from a PC.
Write Contact - Enables writing contacts from a PC to a mobile device.
Read E-mail - Enables reading e-mails on a mobile device from a PC. For iPhone, this content type represents e-mail account settings but not messages because iTunes does not support sync of messages.
Write E-mail - Enables writing e-mails from a PC to a mobile device. For iPhone, this content type represents e-mail account settings but not messages because iTunes does not support sync of messages.
Read Attachment - Enables reading e-mail attachments on a Windows Mobile device from a PC. This right can be enabled only if Read E-mail is selected in the Special Permissions group.
Write Attachment - Enables writing e-mail attachments from a PC to a Windows Mobile device. This right can be enabled only if Write Email is selected in the Special Permissions group.
Read Favorite - Enables reading favorites on a Windows Mobile device and iPhone from a PC.
Write Favorite - Enables writing favorites from a PC to a Windows Mobile device and iPhone.
Read File - Enables reading files on a mobile device from a PC. For iPhone, data flows of the Applications iTune’s type are treated as files.
Write File - Enables writing files from a PC to a mobile device. For a Palm device this right also enables Write Document in the Special Permissions group. For iPhone, data flows of the Applications iTune’s type are treated as files.
Read Media - Enables reading media content using Windows Media Player on a Windows Mobile device and reading media files on a Palm device and iPhone from a PC. This right can be enabled only if Read Files is selected in the Special Permissions group. For a Windows Mobile device, this option also requires selecting Execute from the Generic group. For iPhone, the media content type consists of the following iTunes types: Ringtones, Music, Audiobooks, Photos, Podcasts (Audio & Video), Movies, TV shows, Rented Movies.
Write Media - Enables writing media content using Windows Media Player to a Windows Mobile device and writing media files to a Palm device and iPhone from a PC. This right can be enabled only if Write Files is selected in the Special Permissions group and, for a Windows Mobile device, if Execute is selected from the Generic group. For iPhone, the media content type consists of the following iTunes types: Ringtones, Music, Audiobooks, Photos, Podcasts (Audio & Video), Movies, TV shows, Rented Movies.
Read Backup - Enables creating the iPhone backup by reading the device data from a PC.
 
Note: An iPhone device is backed up by iTunes each time users sync with iTunes (automatically on the first sync, every time they connect it to the computer). To allow synchronization to complete successfully, grant the Read Backup permission to users for the iPhone device type. Otherwise, if iTunes automatically creates an iPhone backup, the synchronization session will be interrupted.
To avoid interrupting the synchronization process, users should set iTunes to sync only the content to which they are allowed access.
Write Backup - Enables restoring iPhone by writing the device backup data from a PC.
Read Note - Enables reading notes on a mobile device from a PC. For a Palm device this right controls Memos and Note Pad content types.
Write Note - Enables writing notes from a PC to a mobile device. For a Palm device this right controls Memos and Note Pad content types.
Read Pocket Access - Enables reading Pocket Access databases on a Windows Mobile device from a PC.
Write Pocket Access - Enables writing Pocket Access databases from a PC to a Windows Mobile device.
Read Task - Enables reading tasks on a mobile device from a PC.
Write Task - Enables writing tasks from a PC to a mobile device.
Read Expense - Enables reading Palm Expense application data on a Palm device from a PC.
Write Expense - Enables writing Palm Expense application data from a PC to a Palm device.
Read Document - Enables reading Palm documents on a Palm device from a PC. This right can be enabled only if Read Files is selected in the Special Permissions group.
Write Document - Enables writing Palm documents from a PC to a Palm device. This right can be enabled only if Write Files is selected in the Special Permissions group.
Read Unidentified Content - Enables reading any other uncategorized content type on a Windows Mobile device from a PC.
Write Unidentified Content - Enables writing any other uncategorized content type from a PC to a Windows Mobile device.
Copy Text - Enables pasting text data from the clipboard.
Copy Image - Enables pasting graphical data from the clipboard.
Copy Audio - Enables pasting audio data from the clipboard.
Copy File - Enables pasting files from the clipboard.
Copy Unidentified Content - Enables pasting any other uncategorized content type from the clipboard.
Screenshot - Enables capturing screenshots of the entire screen, the active window or any segment of the screen.
 
Note: Screenshots made with special programs for creating screenshots are saved directly to files, while screenshots taken with the PRINT SCREEN key are first copied to the clipboard and then pasted into the desired program (for example, Microsoft Word or Paint). When using special programs, the screenshot event falls into the audit immediately when a screenshot is created with such a program, whereas when the PRINT SCREEN key is pressed, the event falls into the audit only when the screenshot is pasted into the desired program.
To capture screenshots by pressing the PRINT SCREEN key, the user must have the Screenshot and Copy Image rights. If users do not have the Screenshot right, they cannot take screenshots with either the PRINT SCREEN key, or using special programs for creating screenshots.
When using special permissions, consider the following:
The Copy Text, Copy Image, Copy Audio, Copy File, and Copy Unidentified Content rights do not control data copying to the clipboard. Users can always copy data to the clipboard regardless of the rights they have.
In some cases, users can use the clipboard to move different types of data in Rich Text Format (RTF), such as Text, Image, File, either individually or in different combinations. To allow users to copy and paste different types of RTF data, you must grant them the appropriate rights (such as Copy Text, Copy Image and Copy File).
If access (read and/or write) to some content type is denied during the iPhone or Windows Mobile synchronization process, you have to replug the device in order to continue using the iPhone or Windows Mobile device.
When users attempt to synchronize a Palm handheld device over a network and DeviceLock denies access to some content type, the synchronization session is interrupted. To avoid this situation, users should set the HotSync application to sync only the content to which they are allowed access before attempting synchronization.