3.6 ACL
ACL (Access Control List) forms a part of Documentum's security mechanism to restrict certain groups/users from accessing a particular object. Documentum stores restricted objects as dm_acl objects. Note that all SysObjects in Docbase have an ACL assigned to them.
An ACL, also called a permission set, stores information regarding the groups/ users that have access to a particular object as well as their access levels (or privilege levels).
Keep in mind that the permission levels are hierarchical, which means a permission level of 'READ' for example would grant permission levels above it as well—'NONE' and 'BROWSE'.
Go through the table shown in figure 3.3 to understand the basic access levels available in Documentum:
|
Permit level (r_accessor_ permit attribute) |
Permission |
Short Description |
|---|---|---|
|
1 |
NONE |
No access to the object. |
|
2 |
BROWSE |
User can view the object's attributes but not its associated content. |
|
3 |
READ |
User can view the content as well but not modify it. |
|
4 |
RELATE... |
