FileNet P8 Platform, Version 5.2.1            

Required minimum access rights by operation

Explanation of the required minimum access rights required by Content Platform Engine to carry out document-oriented operations.

The following assumptions must be made with respect to the access right requirements listed in this topic:

Create minor version
Table that maps the access rights required of the granting object to create a minor version of a document.
Granting object Required minimum access rights
Object Store Create new objects
Document Class Definition Create instance
Document (instance just created)

View properties

-OR-

Modify owner

-OR-

Set Owner of any object

Important: These rights are not, strictly speaking, necessary to create the object; however, it is possible for users to programmatically create an object to which they cannot connect.
Create major version
Table that maps the access rights required of the granting object to create a major version of a document.
Granting object Required minimum access rights
Object Store Create new objects
Document Class Definition Create instance
Document (instance just created)

View properties

-OR-

Modify owner

-OR-

Set Owner of any object (see NOTE above)

Checkout minor version
Table that maps the access rights required of the granting object to checkout a minor version of a document.
Granting object Required minimum access rights
Object Store

Create new objects

-AND-

Modify existing objects

Document Class Definition Create instance (for creating the reservation)
Document (target document) Minor versioning OR Major versioning
Checkout major version
Table that maps the access rights required of the granting object to checkout a major version of a document.
Granting object Required minimum access rights
Object Store

Create new objects

-AND-

Modify existing objects

Document Class Definition Create instance (for creating the reservation)
Document (the target document) Major versioning OR Minor versioning
Cancel checkout
Table that maps the access rights required of the granting object to cancel a checkout of a document.
Granting object Required minimum access rights
Object Store

Delete objects

Document (the reservation)

Delete

-OR-

Minor versioning

-OR-

Major versioning

Other If exclusive reservation, the caller must be the same as the user who did the checkout or have both AccessRight.DELETE and AccessRight.WRITE_OWNER for the reservation object. (These access rights are included in the Full Control access level to the document.)
Check in minor version
Table that maps the access rights required of the granting object to check in a minor version of a document.
Granting object Required minimum access rights
Object Store Modify existing objects
Document (on the reservation) Minor versioning
Other If exclusive reservation, only the user who checked out the document can check it in.
Check in major version
Table that maps the access rights required of the granting object to check in a major version of a document.
Granting object Required minimum access rights
Object Store Create new objects
Document (on the reservation) Major versioning
Other If exclusive reservation, only the user who checked out the document can check it in.
Promote or demote
Table that maps the access rights required of the granting object to promote or demote a document.
Granting object Required minimum access rights
Object Store Modify existing objects
Document (on the reservation) Major versioning
Delete minor or major version
Table that maps the access rights required of the granting object to delete the minor or major version of a document.
Granting object Required minimum access rights
Object Store Delete objects
Document (on the target document) Delete


Last updated: October 2015
p8psa047.htm

© Copyright IBM Corporation 2015.