...
- 9 kinds of administrative permissions – they are assigned at the level of the whole system (for example, the permission to manage users, the permission to manage collections, etc.);
- 7 kinds of catalog directory permissions – they are assigned at the level of a particular catalog particular directory (for example, the permission to list catalog directory content, the permission to manage catalog manage directory publications, etc.);
- 3 kinds of single publication permissions – they are permissions assigned to users at the level of a specific publication (access to published editions, access to all editions, and the management permission); and
- 1 permission at the level of collections – the possibility of assigning objects to a given collection.
There is also a permission inheritance mechanism, which facilitates the use of the permission system. Permissions are passed on both from parent to child objects (for example, sub-catalogs directories inherit some permissions from the catalog the directory they are in) and from user groups to the users of those groups. If a given permission includes other permissions (for example, the permission to manage a publication includes the permission to read and review that publication), then those included permissions do not have to be directly assigned – the assignment of the most general permission will be sufficient. In such a case, we say that the (general) permission implies other permissions (for example, the management permission implies the reading and reviewing permission).
...