Contribution org.nuxeo.ecm.core.security.defaultPermissions--permissions

This contribution is part of XML component org.nuxeo.ecm.core.security.defaultPermissions inside nuxeo-core-9.10.jar /OSGI-INF/permissions-contrib.xml

Extension Point

Extension point permissions of component SecurityService.

Contributed Items

```
<permission name="Browse"/>
```
permission Browse

<permission name="ReadProperties">
      <include>Browse</include>
    </permission>

permission ReadProperties

```
<permission name="ReadChildren"/>
```
permission ReadChildren
```
<permission name="ReadLifeCycle"/>
```
permission ReadLifeCycle
```
<permission name="ReviewParticipant"/>
```
permission ReviewParticipant
```
<permission name="ReadSecurity"/>
```
permission ReadSecurity
```
<permission name="WriteProperties"/>
```
permission WriteProperties
```
<permission name="ReadVersion"/>
```
permission ReadVersion

<permission name="WriteVersion">
       <include>WriteProperties</include>
    </permission>

permission WriteVersion

<permission name="Version">
       <include>ReadVersion</include>
       <include>WriteVersion</include>
    </permission>

permission Version

<permission name="Read">
      <include>Browse</include>
      <include>ReadVersion</include>
      <include>ReadProperties</include>
      <include>ReadChildren</include>
      <include>ReadLifeCycle</include>
      <include>ReadSecurity</include>
      <include>ReviewParticipant</include>
    </permission>

permission Read

```
<permission name="AddChildren"/>
```
permission AddChildren
```
<permission name="RemoveChildren"/>
```
permission RemoveChildren
```
<permission name="Remove"/>
```
permission Remove
```
<permission name="ManageWorkflows"/>
```
permission ManageWorkflows
```
<permission name="WriteLifeCycle"/>
```
permission WriteLifeCycle
```
<permission name="Unlock"/>
```
permission Unlock

<permission name="Remove">
      <include>RemoveChildren</include>
      <!-- NXP-10929: necessary to follow the "delete" transition when Trash is enabled -->
      <include>WriteLifeCycle</include>
    </permission>

permission Remove

<permission name="ReadRemove">
      <include>Read</include>
      <include>Remove</include>
    </permission>

permission ReadRemove

<permission name="Write">
      <include>AddChildren</include>
      <include>WriteProperties</include>
      <include>Remove</include>
      <include>ManageWorkflows</include>
      <include>WriteLifeCycle</include>
      <include>WriteVersion</include>
    </permission>

permission Write

<permission name="ReadWrite">
      <include>Read</include>
      <include>Write</include>
    </permission>

permission ReadWrite

```
<permission name="WriteSecurity"/>
```
permission WriteSecurity
```
<permission name="Everything"/>
```
permission Everything
```
<permission name="RestrictedRead"/>
```
permission RestrictedRead

XML Source

<extension point="permissions" target="org.nuxeo.ecm.core.security.SecurityService">

    <permission name="Browse"/>
    <permission name="ReadProperties">
      <include>Browse</include>
    </permission>
    <permission name="ReadChildren"/>
    <permission name="ReadLifeCycle"/>
    <permission name="ReviewParticipant"/>
    <permission name="ReadSecurity"/>

    <permission name="WriteProperties"/>
    <permission name="ReadVersion"/>

    <permission name="WriteVersion">
       <include>WriteProperties</include>
    </permission>

    <permission name="Version">
       <include>ReadVersion</include>
       <include>WriteVersion</include>
    </permission>

    <permission name="Read">
      <include>Browse</include>
      <include>ReadVersion</include>
      <include>ReadProperties</include>
      <include>ReadChildren</include>
      <include>ReadLifeCycle</include>
      <include>ReadSecurity</include>
      <include>ReviewParticipant</include>
    </permission>

    <permission name="AddChildren"/>
    <permission name="RemoveChildren"/>
    <permission name="Remove"/>
    <permission name="ManageWorkflows"/>
    <permission name="WriteLifeCycle"/>
    <permission name="Unlock"/>

    <permission name="Remove">
      <include>RemoveChildren</include>
      <!-- NXP-10929: necessary to follow the "delete" transition when Trash is enabled -->
      <include>WriteLifeCycle</include>
    </permission>

    <permission name="ReadRemove">
      <include>Read</include>
      <include>Remove</include>
    </permission>

    <permission name="Write">
      <include>AddChildren</include>
      <include>WriteProperties</include>
      <include>Remove</include>
      <include>ManageWorkflows</include>
      <include>WriteLifeCycle</include>
      <include>WriteVersion</include>
    </permission>

    <permission name="ReadWrite">
      <include>Read</include>
      <include>Write</include>
    </permission>

    <permission name="WriteSecurity"/>

    <!-- special permission given to administrators: god-level access -->
    <permission name="Everything"/>

    <!-- deprecated - was used only for a single customer
      project before pluggable permission definitions -->
    <permission name="RestrictedRead"/>

  </extension>