Effective Permissions

Note: This content is no longer updated. For the latest content, please go to the user guide for M-Files Online. For information on the supported product versions, refer to our lifecycle policy.

An object may have various permissions of its own, as well as automatic permissions. All these permissions restrict the use of the object when the extended automatic permissions have been activated. In order for specific access rights, such as read or edit permissions, to be granted to a certain user, all settings must allow it simultaneously. That is, any given permission must be granted by all active settings in order for it to be effective.

Example: Automatic permissions for objects via any project

The access that was specified for the object itself may cover full control of the document for all users while the automatic permissions via a project may restrict the use of the document in such a way that full control is granted to project managers only and all other users have read-only access.

Tip: You can quickly check the effective permissions by user and access right via the table shown in the Permissions dialog.

Example: Internal restrictions to permissions

The permission settings of the object allow full control for all users.
Via its class, the object has been granted permissions that give full control to management and read-only access to all other users.
Via its safety class property, the object has been granted permissions that give full control to management and edit rights to the HR department.

Since any given right must be allowed by all of these settings to be valid, the settings mentioned above restrict each other in such a way that the following permissions are ultimately valid:

Full control for the management.
Read-only access to the HR department.
No rights at all for other users.

The final restrictions are always determined by the strictest settings. As explained further above, all settings must allow the permissions simultaneously in order for them to be effective.

Changing the final permissions of the document or other object

Because all permissions restrict the use of the objects, changes to final access rights can be made in different ways. In the client software, you can change access rights as follows:

You can change the object's own permissions from the Permissions dialog. If the object has permissions granted via properties, the Details button is displayed on the Permissions tab. The button can be used to change the object's own permissions (activate This object first).

If deactivation of the automatic permissions is allowed, you can deactivate the automatic permissions by property.

You can change the object's properties via which automatic permissions were granted to the object (if allowed).

If you cannot change the permissions or properties associated with the object itself and the automatic permissions granted via them, you should contact the administrator for changes of access rights.