Configuration of TSCP-classification in LibreOffice

From The Document Foundation Wiki
Jump to: navigation, search

This article provides the necessary information for handling configuration of classification in LibreOffice to your needs. If needed, feel free to look for additional support.

TSCP-classification

The implementation of classification in LibreOffice is TSCP-classification (Transglobal Secure Collaboration Program - TSCP). It is based on the TSCP BAF: Business Authorization Framework (BAFv1 specification). BAF defines how to describes policies for TSCP classification.

TSCP-Policy file: the BAILS-xml file

The TSCP-Policy in a certain installation, offers the users the available Classifications and Marking and Labelings.

This TSCP-Policy file, is defined in a BAILS-xml file (Business Authorization Identification and Labeling Scheme - BAILSv1 specification), which is composed according to the rules of the TSCP BAF.

This file is only read by LibreOffice.

Example TSCP-policy in default LibreOffice installation

The BAILS-xml file that comes with a default LibreOffice-installation, is example.xml.

Default location of the file is <install-path>/libreoffice/share/classification/

This file be changed in Tools ▸ Options ▸ LibreOffice ▸ Paths... ▸ Classification.

However, LibreOffice uses, if available, the file with <name>_<locale>.xml, so example_nl-NL.xml in LibreOffice with Dutch UI. If that file misses, the general example.xml will be used.

Other available version policy file

The default file offers basic classification options.

A file with a full list of international classifications and markings, as well as some example part numbers, can be found here. It covers the area's Privacy, Intellectual Property, National Security and Export Control.

Creating a TSCP-policy file

It is possible to create TSCP-policy files for different environment and/or organizations. The example.xml policy file shows that the policy must be identified by the elements baf:PolicyName and baf:ProgramID.

When creating the TSCP-policy file for various use cases, it can be considered that certain levels of classification may only be created in certain environments. For example: it does not make sense to offer classification Secret / Internal Only, in an environment where these documents may not be created at all. Or the Staff department, having nothing to do with (international) Intellectual Property, can have e.g. Internal and xxx as available categories.

Allowed combinations of classification and markings

From the available classification and markings in a use case, not all possible combinations may be allowed. The BAILS-xml file does not offer a way to enforce these rules. The user is responsible for the proper choices.

For the special use case of the Dutch Ministry of Defense, there is a table with an overview of available classifications and markings and the allowed combinations. See at page pg 52/53 of the document "Instructie Defensie Beveiligingsbeleid … D/201".(file name CN: /paragraph-labeling/Rubricering_Markings_matrix.ods)

Matching the policy and the user interface

The dialogs for classification and paragraph classification have various lists, of which the items are loaded from the BAILS-xml TSCP policy file. * Items in the list Classification are from the elements baf:BusinessAuthorizationCategory Identifier, the Name string

  • Items in the list International are from the elements baf:BusinessAuthorizationCategory Identifier.
  • Items in the list Marking are from the elements loext:Marking Name
  • Items in the list Intellectual Property are from the elements loext:IntellectualPropertyPart Name
  • Items in the list Part Number are from the elements loext:IntellectualPropertyPartNumber Name
Classification Dialog

Configuration settings for the user interface

The dialogs for classification and paragraph classification, have extra elements for marking of intellectual property of parts. We cover the two that are configurable.

At the bottom there is a section "Intellectual Property" that can be expanded. The setting done by the user, is remembered. A configuration settings allows to expand or collapse the section by default. This setting can also be locked by the sysadmin (either by a Group Policy file or a configuration extension).

In the "Intellectual Property" section there is a IP input field, that is used to add part numbers. Depending on the configuration, it may be allowed to add free text, or only a restricted set of characters (space, “/”, “;” and delete key).

These configuration options are accessible via Tools > Options > LibreOffice > Advanced .. Expert Configuration. Search for Classification.

ClassificationIntellectualPropertySectionExpandedbooleantrue

ClassificationIntellectualPropertyTextInputIsFreeFormbooleantrue

These can be locked however by admin settings.

Configuration of the policy type

In the current implementation, the default policy type is Intelectual Property.

The policies that TSCP mentiones are Export Control, National Security and Intelectual Property.

Changing this default policy can be done in the configuration too.

This configuration option too is accessible Expert Configuration.

ClassificationPolicyshort3

1 = Export Control, 2 = National Security and 3 = Intelectual Property.

This setting can be locked however by admin settings.


Mind: one document can only have one policy type. Attempts to mix those (changing classification of a file with different policies set), will give false/unexpected results.