Document security levels

Explanation of document security levels.

The table below maps document security levels to the rights from which they are comprised. For example, the View Properties level includes the rights View all properties and Read permissions.

In Administration Console for Content Platform Engine, you can view and edit these permissions on the Security page of a document's property sheet or the Default Instance Security page of the document class.

Each right in the table is expressed as a user interface (UI) description of the right and as an access right setting that corresponds to the UI description. For example, the right to view all properties could appear as View all properties in an application UI, but the actual setting for viewing all rights is the AccessRight.READ value.

Table that maps document security levels, which are marked with a check symbol, to the access rights.
Rights Full control Minor versioning Major versioning Modify properties View properties Publish View content <Default>

View all properties

AccessRight.READ

 check check check check check check check

Modify all properties

AccessRight.WRITE

 check check check check      

Reserved12 (Deprecated permissions)

AccessRight.RESERVED12

 check            

Reserved13 (Deprecated permissions)

AccessRight.RESERVED13

 check            

View content

AccessRight.READ_ACL

 check check check check   check check

Link a document/Annotate

AccessRight.LINK

 check check check check   check  

Publish

AccessRight.PUBLISH

 check         check  

Change State

AccessRight.CHANGE_STATE

 check check check check      

Minor versioning

AccessRight.MINOR_VERSION

 check  check check        

Major versioning

AccessRight.MAJOR_VERSION

 check   check        

Delete

AccessRight.DELETE

 check            

Read permissions

AccessRight.VIEW_CONTENT

 check check check check check check check

Modify permissions

AccessRight.WRITE_ACL

 check            

Modify owner

AccessRight.WRITE_OWNER

 check            

Unlink document

AccessRight.UNLINK

   check check check   check  

Create subfolder (Inherit only)

AccessRight.CREATE_CHILD