An object may have various permissions of its own, as well as automatic permissions. It is important to remember that all these permissions restrict the use of the object when the extended automatic permissions have been activated. In order for specific access rights, such as read or edit access, to be granted to a certain user, all settings must allow it simultaneously. That is, any given permission must be granted by all active settings in order for it to be effective.
Example 1: Automatic permissions for objects via any project
The access that was specified for the object itself may cover full control of the document for all users while the automatic permissions via a project may restrict the use of the document in such a way that full control is granted to project managers only and all other users have read-only access.
Automatic permissions via a project may restrict the object's permissions.
Example 2: Internal restrictions to permissions
The user has set up full control for all users of the object. Via the class, the object was granted permissions that give full control to the management and read-only access to all other users. Through the safety class property, the object was granted permissions that give full control to the management and edit rights to the HR department. Since any given right must be allowed by all of these settings in order to be valid, the settings mentioned above restrict each other in such a way that the following permissions are ultimately valid: full control for the management, read-only access to the HR department, no rights at all for other users.
The final restrictions are always determined by the strictest settings; that is, all settings must allow the permissions simultaneously in order for them to be effective.
Changing the final permissions of the document or other the object
Because all permissions restrict the use of the objects, changes to final access rights can be made in different ways. In the client software, you can change access rights as follows:
You can change the object's own permissions from the Permissions dialog. If the object has permissions granted via properties, the Details button is displayed on the Permissions tab. The button can be used to change the object's own permissions (activate This object first).
If deactivation of the automatic permissions is allowed, you can deactivate the automatic permissions by property.
You can change the object's properties via which automatic permissions were granted to the object (if allowed).
If you cannot change the permissions or properties associated with the object itself and the automatic permissions granted via them, you should contact the administrator for changes of access rights.