The
sasfolders
directory
should be accessed only by trusted or unrestricted users. These users
are recognized as unrestricted administrators for the SAS Content
Server, and do not require the Access Control List (ACL) to grant
them access to this directory. If other types of users attempt to
access this location, their permissions are verified before they are
granted any access.
The
sasdav
directory
can be accessed by regular users, and ACLs can be used to grant access
to specific users and groups.
Principals can be granted
permissions for folders and files. In the SAS Content Server, a principal
is either a user or a group of users defined in the SAS Metadata Server.
Principals can be given permissions that allow them to perform specific
tasks such as reading an object, writing to an object, deleting an
object, and so on.
You set permissions
for an object by specifying which principals have which types of access.
To modify permissions for an object, follow these steps:
-
Click the permission
icon
next to the item that you want to modify. A permissions
page appears.
-
For each principal listed,
modify the permissions by changing each permission to
Yes
or
No
.
Note: You might see a principal
named jcr:authenticated. This principal refers to any user who can
log on to a SAS Web application. By default, authenticated users have
Read and Inherit Read permissions only.
-
To add more principals
to the page, do one of the following:
-
If you know the principal's name,
enter it in the field and click
Save changes.
-
Click
Search for Principals to
search for a name. When you find the principal that you want to add,
select the check box next to the principal's name and then click
Return.
After the principal's
name appears on the permission page, you can set permissions for the
principal.
The following display
shows a portion of the console with permissions for a folder:
Folder Permissions in the SAS Content Server
The following permissions
are available for you to apply to objects:
Permissions for Objects
|
|
|
Allows the principal
to read the object. For folders, this permission allows the principal
to see the members of the folder.
|
|
Allows the principal
to write an object. For folders, this permission allows the principal
to create new objects in a folder.
|
|
Allows the principal
to delete the object.
|
|
Allows the principal
to change the permissions on an object.
|
|
Objects created in this
folder inherit this setting for their Read permission (and Inherit
Read permission for subfolders).
|
|
Objects created in this
folder inherit this setting for their Write permission (and Inherit
Write permission for subfolders).
|
|
Objects created in this
folder inherit this setting for their Delete permission (and Inherit
Delete permission for subfolders).
|
|
Objects created in this
folder inherit this setting for their Admin permission (and Inherit
Admin permission for subfolders).
|
Note: Inherited permissions are
assigned when objects are created. Each object has its own set of
permissions. Inherited permissions are static; dynamic inheritance
does not occur.
If you are applying
permissions to folders, then the following options are available:
Results of Applying Permissions to Folders
|
|
|
Changed permissions
are applied to subfolders and files that exist below the current folder.
|
|
Changed permissions
are applied to subfolders and files that exist in the current folder.
|
Overwrite permissions
for all
|
Changed permissions
are applied to all folders and files.
|