MACROMEDIA BREEZE-USING THE BREEZE XML WEB SERVICES, Use Manual

Page: 19 / 196

About security 19
To find out what permissions a logged-in user has for a particular item, call the
permissions-info
action. To change a principal’s permissions, call the
principal-update
action.
If a particular principal has no explicitly specified permissions on a particular SCO, that
principal’s permissions on the SCO’s parent apply.
You can specify the following permissions on a SCO:
view
The principal can view the SCO but not modify it. For a course, the
view
permission lets
the principal enroll in the course. For a meeting,
view
lets the principal attend the meeting. For a
folder,
view
lets the principal view the contents of the folder.
publish
The principal can publish the SCO to the server and can update the SCO. This
permission includes the
view
permission. It also lets the principal view reports related to the
SCO. For a folder,
publish
doesn’t let the principal create new folders within the folder or to set
permissions for the folder. You cannot specify this permission on meetings or courses.
manage
The principal can view, delete, move, and edit the SCO. This permission also lets the
principal set permissions for the SCO. For a folder, the
manage
permission lets the principal view
reports for files in the folder and create new folders. You cannot specify this permission on
meetings or courses.
denied
The principal cannot view, access, or manage the SCO. You cannot specify this
permission on meetings or courses.
presenter
(For meetings only) The principal can create or present a meeting. This permission
lets the principal create or present the meeting, even if the principal doesn’t have
view
permission
on the meeting’s parent folder.
Because a group is a principal, you can set these permissions on a SCO for a nonprimary group as
well as for an individual user; if a group has a particular permission, all members of the group
have that permission. Use the
group-membership-update
action to add a member to a group.
Use the
permissions-update
action to set a group’s permissions for a particular SCO.
The only way to obtain certain other kinds of permissions is to be a member of a primary group,
as follows:
The account authors primary group
lets its members create or edit a presentation anywhere in
the system, regardless of the ACL permissions.
The account administrators primary group can manage users and groups.
The account meeting administrators primary group can create and present meetings anywhere
in the system, regardless of the ACL permissions.
The course managers primary group
can create and edit courses anywhere in the system,
regardless of the ACL permissions.
To have full access to the entire system, you must be a member of all four primary groups.