Document permission elements

File security-config.xml must contain a <DocumentAccessProfile> element for every document security type listed in the DocumentSecurityType typelist. If you add a new document security type to the typelist, then you must add a corresponding <DocumentAccessProfile> element to security-config.xml.

Thus, a <DocumentPermission> element in the security-config.xml file controls access to a document type.

This element has the following syntax:

<DocumentPermissions>
  <DocumentAccessProfile securitylevel="level">
    <DocumentCreatePermission permission="perm"/>
    <DocumentDeletePermission permission="perm"/>
    <DocumentEditPermission permission="perm"/>
    <DocumentViewPermission permission="perm"/>
  </DocumentAccessProfile>
</DocumentPermissions>

The attributes on the various elements have the following meanings.

Element

Attribute

Required

Description

DocumentAccessProfile

securitylevel

Yes

A document security type defined in the DocumentSecurityType typelist.

DocuumentCreatePermission

DocumentDeletePermission

DocumentEditPermission

DocumentViewPermission

permission

Yes

A system permission defined in the SystemPermissionType typelist.

The following code sample illustrates the security access levels for the Unrestricted and Internal Only security access types. Notice that unrestricted documents have no access controls set.

<DocumentPermissions>
  <DocumentAccessProfile securitylevel="unrestricted"/>
  <DocumentAccessProfile securitylevel="internalonly">
     <DocumentViewPermission permission="viewintdoc"/>
     <DocumentEditPermission permission="editintdoc"/>
     <DocumentDeletePermission permission="delintdoc"/>
     </DocumentAccessProfile>n="delsensdoc"/>
   </DocumentAccessProfile>
</DocumentPermissions>
Note: PolicyCenter grants these permissions based on the user’s roles alone. You cannot restrict document access based on security zones or groups.