org.nuxeo.ecm.platform.comment.defaultPermissions
Extension point to register permission definitions or override
existing permissions.
Example to define a single atomic permissions that are not meant
to be displayed in the rights management screen of folders:
Example to define a compound permission that holds many related
atomic permissions into a single high level (role-like)
permission:
Browse
ReadVersion
ReadProperties
ReadChildren
ReadLifeCycle
ReviewParticipant
Note that each of the included permissions should have been
previously registered with their on <permission/>
declaration.
It is later possible to override that definition in another
contribution to that extension-point to add a new permission
'CustomPerm' and remove 'ReviewParticipant':
CustomPerm
ReviewParticipant
Eventually the permissions declaration also accept 'alias' tags to
handle backward compatibility with deprecated permissions:
Version
NB: the alias feature is parsed by the extension point but the
underlying SecurityManager implementation does not leverage it
yet.
WriteLifeCycle