DIRECTORY SERVICES

Default access compared to form-specific access
When you set a subject's access to a selected target, you specify default access settings that generally apply to all types of documents at the selected target. Then you can also set form-specific access settings that are different than the default access settings. For example, by default you can deny a subject Browse and Read access, but then allow Browse access to Person and Group documents and Read access to the fields in those documents.

Default access

You use the "Extended Access at target" dialog box to set a subject's default access to a target. The following figure shows default access set to Deny all for the -Default- subject at / (root):

Default privileges in an extended ACL

Form-specific access

You click Form and Field Access from the "Extended Access at target" dialog box to use the "Form and Field access at target" dialog box to set form-specific access settings that are exceptions to the selected subject's default access at the selected target. The following figure shows access set for the Person form for the -Default- subject at / (root):

Form-specific privileges in an extended ACL

Note The Administer access setting is available only as a default access setting, and not as a form-specific access setting.

Related topics