Document lifecycle policies and lifecycle actions access rights

Document lifecycle actions and lifecycle policies are independently securable.

Lifecycle actions and lifecycle policies have the following security characteristics:

  • Both are instances of their own classes: the Document Lifecycle Policy class and Document Lifecycle Action class. Therefore they obtain initial security from the Default Instance Security ACL of their class, like all objects do when first created. Both classes are subclassable. You can view and modify these classes under the Administration Console for Content Platform Engine Other classes node.
  • Lifecycle actions and policies are independently securable. They are not required to have the same security as the security placed on the document class (or individual document) to which they are attached. It is obviously a much simpler security model if they do. However it can be configured differently if required by the needs of the application's security.
  • Document lifecycle actions and policies do not have a security parent relationship with any other object. Specifically, a lifecycle policy does not have a security inheritance relationship with the document class to which it is associated.
  • In Administration Console for Content Platform Engine, individual lifecycle actions and lifecycle policies are displayed in subfolders of the Object Stores > object store name > Events, Actions, Processes node. If these folders are empty it means that none have been created for that object store. Both objects have property sheets containing a Security tab which allows you to view and modify the security on that object.
  • Like other objects, lifecycle actions and lifecycle policies have an owner property. The owner need not be the same as the owner of the document with which the lifecycle policy is associated.

Document lifecycle policy access rights

Table of document lifecycle policy access rights
Full Control Modify Properties Link View Properties
All in Modify Properties plus:
  • Delete
  • Modify permissions
  • Modify owner
 All in Link plus:
  • Modify all properties
  • Create instance
 All in View Properties plus:
  • Link a document
  • View properties
  • Read permissions

Document lifecycle action access rights

Table of document lifecycle action access rights
Full Control Modify Properties Link View Properties
All in Modify Properties plus:
  • Delete
  • Modify permissions
  • Modify owner
 All in Link plus:
  • Modify all properties
  • Create instance
 All in View Properties plus:
  • Link a document lifecycle policy
  • View properties
  • Read permissions