Manual and Documentation

NOTE: This manual describes HammerKit version 3.5. To view documentation for the current release of HammerKit Studio, please go to http://manual.hammerkit.com/
search
Index / F. Access Rights / Files

A. Introduction
B. Installation and Configuration
C. Using HammerKit tools
D. Object API
E. HammerScript
F. Access Rights
General Rules
Setting Access Rights
Files
Files


Access Levels to Files

Files have have five levels of access rights that can be assigned to users or user groups:
  1. Inherit: This means that no access right has been assigned to a user or user group. In this case the access right is inherited from the user group that the user or user group is a member of.
  2. Deny: The user is denied all access to the file.
  3. Read: The user can view the file and its attribute values.
  4. Write: The user can modify the file and all its attributes except the attributes  user_id and visible. In other words a user with write rights can modify all file information except information that alters the file's access rights in some way.
  5. Admin: The user can do all actions on the file.

System Users and File Owners

A system user and the owner of a file always has admin rights to a file. The creator of a file always automatically becomes the owner of the file. The id of the owner of the file is stored in the file's attribute user_id.


Visibility for Files

Files have three visibility levels which determine how the access level is checked for a file:
  1. Global deny: All users are denied any access to the file.
  2. Global read: All users have read access to the file.
  3. By access rights: The access is checked from the rights assigned to the current user.
These visibility settings do not affect the system users and the owners of files. They still always have admin rights to a file.


Access Inheritance

If an access right has not been assigned to a user, then the access right is inherited from the user group or groups a user is a member of. If a user is a member of several groups, then the highest access right is inherited.

All users inherit the access rights of a virtual user group All users. The default access right for this virtual user group to any targets is deny.

User groups do not inherit access rights from other user groups higher in the group hierarchy.


� HammerKit Oy 2008 UPDATED: 11.04.2008 14:58