The 'Apply changes in permissions to all children objects' is greyed out unless a folder object has been selected. If this box is checked, new permissions under the Children column are applied to any new or existing subfolders under the object folder. This option does not overwrite existing permissions. Selecting this check box will also enable two other check boxes:
- Overwrite children's access control lists: Permissions for all objects immediately within this folder are replaced by the permissions under the Children column. Objects inside subfolders of this folder are not affected.
- Recursively: Permissions under the Children column are applied to all subfolders and the objects they contain.
If all three of these check boxes are selected, all subfolders will have the permission setting listed in the Object column. Non-folder objects such as reports and filters will have the setting listed under Children.
The Ownership button, located below the Permissions area, allows users to assign ownership privileges for the object to themselves.
The following list contains the permissions and descriptions:
- View: Allows the user to only view the object. The user may view the object's definition but cannot edit, cut, copy and paste, delete, or rename the object. If the object is a folder, the user may navigate within the folder.
- Modify: Allows the user to edit, cut, copy and paste and rename the object. The user cannot modify the object's Access Control List.
- Full Control: The user has no restrictions on the object; this includes modifying the object's Access Control List.
- Denied All: The user cannot even see the object.
- Custom: Opens the Access Control Entry dialog box for the object, with the following options:
- Browse: Allows the user to see the object in the Folder List and Object Viewer. However, if the object is a folder and the user does not have read permissions to this folder, the user will see the folder but will not be allowed to open it.
- Read: Allows the user to view the object's definition and Access Control List if the user also has Use permissions to the object. Additionally, the user must have Browse permissions to view the object. The user is not allowed to cut, copy and paste, delete, rename, or modify the object's definition or its Access Control List.
- Use: Allows the user to use this object when creating or modifying other objects such as reports or documents. However, the user is not allowed to execute the reports or documents created with the object.
- Write: Allows the user to modify the object's definition but not the object's Access Control List. Additionally, the user may cut, copy and paste, and rename the object. To take advantage of this permission, the user must also have Browse, Read, and Use permissions to the object.
- Delete: Allows the user to delete this object.
- Control: Allows the user to modify the Access Control List of this object or take ownership it.
- Execute: Allows the user to execute reports (or documents) which reference this object. However, if the user does not have Execute permissions to a metric used in the report, the report will execute but the metric will not be displayed; for example:
- The user has Execute permissions to the following report but does not have Execute permissions to the metric 'Revenue'.
