Entity permissions

#Entity permissions

Specification for Entity permissions

List of permissions

The permissions identified within DMSF 1.5 will be as follows

• View
  • Dmsf::File: Gives the ability to view the file (and download)
  • Dmsf::Folder: Allows a user to list the folder contents.
• Write
  • Dmsf::File: Allows a user to write to an existing file - creating revisions.
  • Dmsf::Folder: Allows a user to create new files within a directory.
• Modify
  • Dmsf::File: Allows for modification of the file itself, change workflows, rename etc.
  • Dmsf::Folder: Allows a user to rename the folder entity.
• Delete
  • Dmsf::File: Allows for the file to be deleted (and/or revisions).
  • Dmsf::Folder: Allows for deletion of a folder (providing it is empty and/or the user has rights to delete the contents of).
• Permission Assignment
  • Allows for modification of an entities permission.

Management

Key points about permissions:

• Assignment can be against either a file or a folder.
• Inheritence of permissions is automatic.
• Permissions can be assigned against a specific user or a role.
• A permission assigned against a specific user holds more weight then a permission assigned to a role.
• Permssions can be assigned as either an allow or a prevent.
• More weight is placed on an allow then a prevent:
  • If a user is a member of two roles one with an allow and one with a prevent, then they would be allowed.
  • This does not apply to user-specific permissions as they hold more weight.