The granting of the ability (1) to a specific user, (2) to perform a specific action, (3) on a specific content object.

For example, Bob might have the ability to edit the Privacy Policy.

Permissions are usually granted in aggregate. For example, the Editors group has all permissions over all content. Or, Alice has publish permission on all content in the News section. Additionally, permissions on objects are often inherited from a parent object or folder, rather than being assigned directly.

The technical name for a single permission is an Access Control Entry which are then aggregated into Access Control Lists. The effect of permissions in aggregate is known as the discipline of subsystem of authorization.

Related Chapters

Have a question, comment, or objection? Please contact the author at Be sure to check the To Do List first.


Understand your CMS. Cut through the buzzwords. Order Web Content Management today.

Order Now
Back to Top

Brought to you by