ACL assignment when an item is created

The choices that the system administrator makes when an access control list (ACL) is selected for an item type determine how an ACL is assigned to items in that item type. When you are working with ACLs, you should understand how the choices affect ACL assignment and how the ACL is assigned to an item.

When an item is created, the ACL that is assigned to the item is determined by a series of actions, as shown in the following flowchart.

Figure 1. ACL assignment when an item, resource, document, or document part is created

The following steps explain the ACL assignment when an item, resource item, document item, or document part item is created:

1. Is the ACL provided by the user? If yes, go to Step 2. If no, go to Step 3.
2. The item gets the user-assigned ACL. The assignment flow ends.
3. Is the option to inherit the parent folder ACL selected on the item type? If yes, go to Step 4. If no, go to Step 6.
4. Is a parent folder assigned? If yes, go to Step 5. If no, go to Step 6.
5. The item gets the ACL of the parent folder. The assignment flow ends.
6. The item uses the default ACL setting of the item type. Go to Step 7.
7. Is the default ACL binding level set to Item type level? If yes, go to Step 8. If no, go to Step 12.
8. Is the item type classification set to Item, Resource, or Document? If no, go to Step 9. If yes, go to Step 11.
9. The item type classification is Document part. Go to Step 10.
10. The item gets the ACL from the document management definition of the document for this document part item type. The assignment flow ends.
11. The item gets the ACL from the active view, also known as the item type subset, from the client application. The assignment flow ends.
12. The default ACL binding level is set to Item level. Go to Step 13.
13. Is the default ACL choice on the item type set to The ACL of this item type? If yes, go to Step 14. If no, go to Step 15.
14. The ACL assignment follows the same rules as the binding level of the item type. The item gets the ACL from the ACL of the item type. The assignment flow ends.
15. The default ACL choice on the item type is set to The default ACL of the user. Go to Step 16.
16. The item gets the ACL from the user profile ACL. This ACL is obtained from the user definition of the user who is creating the item. The assignment flow ends.