Content Manager - Permission
Overview
Document Permisions represents a mechanism to manage access to documents (i.e. records, instances) of specified entity. Permissions are defined by user roles and their permissions. Current user is represented by set of roles, if any of these roles fits to any of roles assigned to documents then functionality allows to manipulate with such document. Of course requested permission must fit to permissions assigned to appropriate roles.
Api
- File permissions -
/api/v1/Files/{id}/DocumentPermissions - Folder permissions -
/api/v1/Folders/{id}/DocumentPermissions
Content Manager Permissions
| Permission | Handler Type | Behavior and Implementation Hints |
|---|---|---|
| Create (sub)folder | Command | Update permission check is applied to parent folder when subfolder is being created |
| Search folders | Query | Read permission check is applied to each folder which is being retrieved individually,note: no folder inheritance is applied |
| Read folder(s) | Query | Read permission check is applied to parent folder and each folder which is being retrieved,note: no folder inheritance is applied |
| Delete empty (sub)folder | Command | Delete permission check is applied to the (sub)folder which is being deleted,Update permission check is applied to parent folder, note: test if any subfolders and files exist ignores their document permisions |
| Create file | Command | Update permission check is applied to parent folder when file is being created,note: no folder inheritance is applied |
| Search files | Query | Read permission check is applied to each folder and each file which is being retrieved,note: no folder inheritance is applied |
| Read files in folder | Query | Read permission check is applied to parent folder and each file which is being retrieved,note: no folder inheritance is applied |
| Read file or file-content | Query | Read permission check is applied to parent folder and file which is being retrieved,note: no folder inheritance is applied |
| Delete file | Command | Delete permission check is applied to the file which is being deleted,Update permission check is applied to parent folder,note: no folder inheritance is applied |
| Create link | Command | Read permission check is applied to linked file and its parent folder when link is being created,note: no folder inheritance is applied |
| Ensure | Command | Read permission check is applied to parent folder relative to the last folder on provided path,Update permission check is also applied to parent folder, but only if new folder is being created,note: no folder inheritance is applied |