| Excerpt |
|---|
Describes how messages requesting operation on a collection are checked against the permission model. |
...
Components participating in a Bit Repository where RequireOperationAuthorization in RepositorySettings have been set to true is required to authorise any operation prior to performing them.
...
- An Operation type. There is one Operation type for each operation type (see Protocol messages), and an a catch-all named "All"
- An optional list of allowed component IDs who are allowed to perform the operation. If the list is not present it implies that there is no restriction
- An optional list of collection IDs where the OperationPermission applies. If the list is not present it implies that there is no restictionrestriction
To be a "suitable" OperationPermission, a request should match all of the available constraints (Operation type, component ID and collection ID).
...