Permissions Object

A Permissions object represents a collection of Permission objects. A Permission object represents a single, defined, workspace permission.

When all Permission objects in a Permissions collection apply to the same object, the collection is known as an access control list (ACL). This list may or may not include all permissions on the folder (for example, due to non-privileged users not being able to see all permissions).

The change permission specifies whether or not a group may change the permissions of a folder. Only a user with either Security Administrator or Public Folder Administrator can set a Change-Permission permission. A Security Administrator can set Change-Permission for any group, but a Public Folder Administrator can only set Change-Permission for their own groups.

The access permissions control access to the Folder object and its content. Effective permissions indicate what access rights a group has on the controlled object. A workspace folder can have no more than one type of access permission for the same group. For example, a group can have both Read-Write and Change-Permission, but cannot have both Read-Write and Read-Only.

A Change-Permission permission is included in the set of applied permissions for a controlled object (for the current user or a selected user or group).

The Change-Permission, No-Access, Read-Only, and Read-Write permission types are inherited. For example, granting a Change-Permission on a folder effectively grants it on all subfolders as well. This has the effect of granting the group a security administrator role within that context.