Macromedia breeze-using the breeze xml web services User Manual

Page of 196
About security
19
To find out what permissions a logged-in user has for a particular item, call the 
 action. To change a principal’s permissions, call the 
action.
If a particular principal has no explicitly specified permissions on a particular SCO, that 
principal’s permissions on the SCO’s parent apply.
You can specify the following permissions on a SCO:
view
  The principal can view the SCO but not modify it. For a course, the 
view
 permission lets 
the principal enroll in the course. For a meeting, 
view
 lets the principal attend the meeting. For a 
folder, 
view
 lets the principal view the contents of the folder.
publish
  The principal can publish the SCO to the server and can update the SCO. This 
permission includes the 
view
 permission. It also lets the principal view reports related to the 
SCO. For a folder, 
publish
 doesn’t let the principal create new folders within the folder or to set 
permissions for the folder. You cannot specify this permission on meetings or courses.
manage
  The principal can view, delete, move, and edit the SCO. This permission also lets the 
principal set permissions for the SCO. For a folder, the 
manage
 permission lets the principal view 
reports for files in the folder and create new folders. You cannot specify this permission on 
meetings or courses.
denied
  The principal cannot view, access, or manage the SCO. You cannot specify this 
permission on meetings or courses.
presenter
  (For meetings only) The principal can create or present a meeting. This permission 
lets the principal create or present the meeting, even if the principal doesn’t have 
view
 permission 
on the meeting’s parent folder.
Because a group is a principal, you can set these permissions on a SCO for a nonprimary group as 
well as for an individual user; if a group has a particular permission, all members of the group 
have that permission. Use the 
 action to add a member to a group. 
 action to set a group’s permissions for a particular SCO.
The only way to obtain certain other kinds of permissions is to be a member of a primary group, 
as follows:
The account authors primary group
 lets its members create or edit a presentation anywhere in 
the system, regardless of the ACL permissions.
The account administrators primary group
 can manage users and groups.
The account meeting administrators primary group
 can create and present meetings anywhere 
in the system, regardless of the ACL permissions.
The course managers primary group
 can create and edit courses anywhere in the system, 
regardless of the ACL permissions.
To have full access to the entire system, you must be a member of all four primary groups.