You can grant Can Read and Can Edit permissions to a collaborative
space/organization pair in a user's credentials. If you grant content access to a
collaborative space/organization pair, users who belong to that collaborative
space/organization pair receive content access based on their assigned responsibility.
If a user is a member of a collaborative space/organization pair that is granted the
Can Edit permission, users can edit objects only if their responsibility allows them to edit it. For example, your system could have two users with the
following credentials:
User Name |
Responsibility
|
Organization |
Collaborative Space |
User A |
Contributor
|
CompanyName |
Review |
User B |
Leader
|
CompanyName |
Design |
User B creates a Physical Product in the Design collaborative space, and grants User
A the Can Edit permission. User A can see and modify the Physical Product.
However, if User B grants the Can Edit permission to the CompanyName.Review
collaborative space/organization pair instead of granting it directly to User A,
User A can see the Physical Product, but cannot modify it because the user is only
assigned the Contributor
responsibility in that collaborative space/organization pair. The responsibility does not contain editing permissions.
The responsibility assigned to user groups defines the maximum level of content access independent
of the individual user's assigned responsibility. As an example, your system could have two users with the following credentials:
User Name |
Responsibility
|
Organization |
Collaborative Space |
User C |
Leader
|
CompanyName |
Review |
User D |
Leader
|
CompanyName |
Design |
User D creates a Physical Product in the Design collaborative space, and
grants the Can Read permission to the CompanyName.Review collaborative
space/organization pair. Although User C has the
Leader
responsibility, User C's credentials only grant the Can Read permission, so User C can see, but
not modify the Physical Product.