Automatic Permissions for Value List Items

You can use automatic permission settings to pass permissions for an object when the object has a property value, object type or class that uses automatic permissions. The object receives automatic permissions when a value with automatic permissions specified is added to the object metadata.
Note: Micro Focus IDOL and Smart Search: If more than four automatic ACL sources control the permissions of an object, only administrators can see it in search results.


The "Automatic Permissions" dialog for a value list item.

In the above example, automatic permissions have been activated. Read-only access has been granted to all users and a separate access to project managers.

Restrict the permissions of objects that refer to this value

Activate the function Restrict the permissions of objects that refer to this value when you want to activate the automatic permissions.

Use the value's own permissions

You can use the permissions of a value or object, such as a project, as automatic permissions.

In this type of case, for example, a project plan inherits the permissions of the project that is added as a value to the metadata of the project plan. For example, the user has defined permissions for the project House project Haven that allow access for the project manager and project group only. When this project is added to the metadata of a project plan, the same permissions are granted to the plan.

Note: Automatic permissions are not inherited indirectly. Let's say we have the object "Hugh Brent" that inherits automatic permissions via the "Look Up Company" property. These permissions are no longer inherited by the "CRM Application Development" object that has "Hugh Brent" as one of its property values.

Name

Give as descriptive a name as possible to the automatic permissions set, because this information will be displayed in the client software.

Specify permissions

You can then specify the automatic permissions that are always activated automatically for the object when a value, object, or class using automatic permissions is added to the object's metadata.

For more information on permissions, see Object Permissions. Also refer to the specification of pseudo-users in Pseudo-users.

Note: If you do not explicitly allow any permissions, using this kind of value or object restricts all permissions for the final object.

Allow users to deactivate these restrictions

You can also specify whether the users are allowed to deactivate the automatic permission restrictions created via this value, so that the users can delete the preset automatic permissions if they so desire.

Remarks about using automatic permissions

The specified value providing automatic permissions must be selected on the metadata card for the explicit property definition for which you have enabled automatic permissions. See Verifying Which Properties Have Automatic Permissions Enabled.

Note: The value-specific settings always have priority over the settings made at value list and object type level.

Enabling Automatic Permissions for a Value List Item

  1. Open M-Files Admin.
  2. In the left-side tree view, expand a connection to M-Files Server.
  3. In the left-side tree view, expand Document Vaults, and then expand a vault.
  4. Still in the left-side tree view, expand Metadata Structure (Flat View) and then select Value Lists.
    Result:The Value Lists list is opened in the right pane.
  5. Right-click a value list that you want to edit and select Contents... from the context menu.
    Result:The Value List Contents dialog is opened.
  6. Select a value list item that you want to edit and click the Permissions... button.
    Result:The Permissions dialog is opened.
  7. On the Automatic Permissions tab, check the Restrict the permissions of objects that refer to this value check box.
  8. Do one of the following:
    If you want toDo the following
    Use the existing permissions of the value as automatic permissions Check the Use the value's own permissions check box.
    Use an existing named access control list as automatic permissions Check the Use named access control list check box and, using the drop-down menu, select a named access control list.
    Define new permissions to be used as automatic permissions In the Name field, type in a name for the permissions, click Add... to add users or user groups affected by these permissions, and select the appropriate Allow or Deny check boxes on the Permissions list.
  9. Optional: Select the Allow users to deactivate these restrictions check box if you want to give users the option to disable the automatically set permissions and employ user-defined permissions instead.
  10. Click OK to close the Permissions dialog.
  11. Click Close to close the Value List Contents dialog.
The selected value now has automatic permissions defined. When this value is added to the metadata of an object, the object receives the automatic permissions defined for the value.

Verifying Which Properties Have Automatic Permissions Enabled

  1. Open M-Files Admin.
  2. In the left-side tree view, expand a connection to M-Files Server.
  3. In the left-side tree view, expand Document Vaults, and then expand a vault.
  4. Still in the tree view, expand Metadata Structure (Flat View).
  5. Select the Property Definitions node.
You can see which properties have automatic permissions enabled in the Automatic Permissions column of the listing area.