Object store security levels
The table below maps object store security levels to the rights from which they are comprised. For example, the Use object store security level includes the rights Connect to store, Create new objects, Modify existing objects, and Delete objects. Access rights to an object store are limited to only that object store and do not extend to other object stores in the FileNet® P8 domain.
In Administration Console for Content Platform Engine, the object store's security page lists the users and groups that were added while running the object store wizard as follows:
- Users and groups added as users receive the Use object store level.
- Users and groups added as administrators get Full Control and are therefore object store administrators.
Each right in the table is expressed as a user interface (UI)
description of the right and as an access right setting that corresponds
to the UI description. For example, the right to connect to an object
store could appear as Connect to store in an application
UI, but the actual setting for connecting to an object store is the AccessRight.CONNECT value.
| Rights | Full Control | Use object store | View object store <Default> |
|---|---|---|---|
Connect to store
|
|
|
|
View all properties
|
|
|
|
Create new objects
|
|
|
|
Modify existing objects
|
|
|
|
Delete objects
|
|
|
|
Set owner of any object
|
|
||
Modify all properties
|
|
||
Read permissions
|
|
||
Modify permissions
|
|
||
|
Modify retention
|
|
||
|
Modify certain system properties
|