There are two types of inheritance: group inheritance and folder inheritance. Group inheritance gives users the right to inherit rights as the result of group membership. For example, if you create a user called demo user, and add it to an existing group called sales, then demo user will automatically inherit the appropriate rights for each of the reports and folders that the sales group has been added to.
To have full control over object security, CMC allows us to set up advance rights. These advanced rights provide increased flexibility as we can define security levels for objects at a granular level. Some of the available options are as follows:
|
Rights option |
Description |
|
Granted |
When the granted option is chosen, the right is granted to a principal. |
|
Denied |
When the denied option is chosen, the right is denied to a principal. |
|
Not specified |
The right is unspecified for a principal. By default, rights set to not specified are denied. |
|
Apply to object |
These are object-level rights. They only become available when we choose either granted or denied. |
|
Apply to sub objects |
These are subobject level rights. They only becomes available when we choose either granted or denied. |
We will not delve any deeper, as security in itself is a huge topic and is beyond the scope of this book.