The following table displays the security object classes, instances, and permissions of SMS. "Class" refers to all objects of that type, while "instance" refers to a particular object, such as a particular collection. Some permissions, such as Create and Administer, apply only to classes, but most permissions apply to both classes and instances. (See About Permissions for descriptions of each permission.)
The meaning of most permission and security object combinations is straightforward. For example, having the Read permission on the package security object class permits seeing all packages and their properties. Having the Create permission on the package security object class permits creating new packages. However, there are two security object classes for which the meanings of certain permissions are not obvious: advertisements and collections.
| Permission | Security object | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Collection | Package | Advertisement | Site | Query | Status | |||||||
| Class | Instance | Class | Instance | Class | Instance | Class | Instance | Class | Instance | Class | Instance | |
| Read | X | X | X | X | X | X | X | X | X | X | X | |
| Modify | X | X | X | X | X | X | X | X | X | X | ||
| Delete | X | X | X | X | X | X | X | X | X | X | X | |
| Create | X | X | X | X | X | X | ||||||
| Administer | X | X | X | X | X | X | ||||||
| Distribute | X | X | ||||||||||
| Use Remote Tools | X | X | ||||||||||
| Advertise | X | X | ||||||||||
| Read Resource | X | X | ||||||||||
| Modify Resource | X | X | ||||||||||
| Delete Resource | X | X | ||||||||||
| View Collected Files | X | X | ||||||||||
Related Topics
About Collection and Resource Security
Security Configuration Overview