Markings
This section explains what markings are and how they affect
the effective security on objects. Primarily designed for use by the IBM® Enterprise Records application, markings are
available to any application that needs the kind of property-based
layer of security that markings provide.
Markings overview
Markings allow access to objects to be controlled based on specific property values.
Marking security: Add, Remove, Use
Marking security consists of the Add marking, Remove marking, and Use Marked Objects.
Effect of Copy to reservation
If the string property containing a marking has kept the default Copy to Reservation setting of True , then a user who has Use Marked Objects but does not have the Add Marking permission will not be able to check out a document, even if the user has Full Control of the document itself.
Constraint Mask
By default, all the rights are checked, meaning all constraints are masked and only those that have the Use Marked Objects access rights on the marking will be able to view and access the object.
Allow, Deny permissions
Each access control entry listed on a marking value's security page is marked either Allow or Deny.
Hierarchical and Non-hierarchical
There are two types of marking sets: hierarchical and non-hierarchical.
Marking administration (create, modify, remove)
You can use Administration Console for Content Platform Engine for creating and applying marking sets. Applications can also utilize one of the Content Cortex APIs.