Run Filter with Minimal Privileges
OpenText recommends that you run Filter with only those privileges that are necessary for it to function correctly, which follows best practice for any application. In particular, Filter needs access only to the following directories:
-
the Filter bin directory.
-
any input and output locations.
-
the configured temporary directory (see Protect the Temporary Directory).
If you cannot drop privileges for some reason (for example because the calling application requires elevated privileges again after the call to Filter), you can configure Filter to drop privileges when you launch out-of-process filtering. For information about how to use this configuration option, see Run KeyView with Reduced Privileges.