Access control: Standard access-rights

Definition of Standard access rights

• For each node category (resp. edge type), the administrator is able to set one of the following access-rights:
  • NONE: The user can't access (search or display) nodes (resp. edges) of that category (rest. type).
  • READ: The user can search display nodes (rest.edges) of that category (resp. type).
  • EDIT: The user can edit properties of nodes (rest. edges) of that category (resp. type).
  • CREATE AND DELETE: The user can:
    • Create new nodes of that category (resp. edges of that type).
    • Delete nodes of that category (resp. edges of that type).
    • Add or remove that category from existing nodes of that category (resp. edges of that type).
• Access rights are cumulative (see example below).

Example

• User Foo belong to the groups Accounting and Sales
• Group Accounting has NO ACCESS access right on node-category CONTRACT
• Group Sales has EDIT access right on node-category CONTRACT

As a result: user Foo has EDIT access on node-category CONTRACT