An advertisement contains both a package and a collection, but packages and collections are also security objects that users can have permissions for. Therefore, advertisement permissions must be accompanied by certain other permissions on the collections and packages in the advertisement; otherwise, the permissions on the advertisement are useless.
|Permission on Advertisement||Must also have these permissions on|
These permissions apply equally to security object classes and instances. For example, to modify a particular advertisement, a user must have Read permission on the package and Advertise permission on the collection. To have Modify permission for the Advertisements security object class, a user must have Read permission on the Packages security object class and Advertise permission on the Collections security object class.
About Permissions and Security Objects
Security Rights Overview
Security Configuration Overview