Figure 5-9 Document Manager actions and dialog objects 5.1.5 Managing security through the Desktop design In the sample application, the user group grpSales is associated with the  Sales  Proposal - Add  action and dialog object. This means that users who are in the  grpSales group can add a sales proposal document to the system. Users who  are not in the grpSales group will not be able to add a sales proposal document  even if the ACL for the sales proposal class permits them to add documents for  this class. Users interface with a Document Manager system using the Document Manager  Desktop client. Document Manager enables you to customize the Desktop client  to provide security to the system.  You can create different Desktops for different users. You can control the menus  and the icons available to users, and you can control the folder pane users see to  control users’ views, folders, and searches.  For illustration purposes, we show you the Document Manager Desktop view of  two types of users, the administrative user (ICMADMIN) and an occasional  Document Manager user (USER).   Chapter 5. Security  109 Actions and dialog objects Each object has groups associated with it.