Permission action
The action specifies the type of WSRR activity for which permission is to be granted.
The following actions are provided:
- srrCreate - this controls all creation of objects matching the target.
- srrRetrieve - this controls all explicit retrieval of objects matching the target.
- srrUpdate - this controls any change of metadata or content for objects matching the target.
- srrDelete - this controls any deletion of objects or artifacts matching the target
- srrTransition - this controls any governance lifecycle transition of objects matching the target.
- srrManageGov - this controls any action to make something governed or to remove governance from an object.
Note: Permissions for the actions srrCreate and srrDelete are supported
only on objects of type OriginalObject. If you apply a permission
with an action of srrCreate or srrDelete to a LogicalObject, it will not have
any effect. This is because a LogicalObject is created or deleted
automatically as a result of the creation or deletion of the parent
object from which it is derived; if a user has the permission to create
or delete the parent object then the derived LogicalObject will be
created or deleted regardless of any permissions applied to it. For
example, consider the following scenario:
- A permission with the action srrCreate and the target "/WSRR/WSDLPortType" is granted to the WSRRAdmin role.
- A user who is not granted the WSRRAdmin role now persists a WSDL document that contains at least one portType element.
- As a result of the creation of the WSDLDocument, one or more derived WSDLPortType objects are created automatically, ignoring the permission created in step 1; WSDLPortType is a subclass of LogicalObject, so the permission does not apply.