Re: Re[2]: Understanding Privileges

> >> 3.  Are there some rules of privileges & groups priority in privileges
> >> (except levels)? For example - PN.
> Do  I  need  to keep any special order when create privileges? E.g., I
> deny  access  for Group to some module but with next step grant access
> for this Group to some item(s) of this module. Is it permitted?

No the sequence of privileges is not important. Indeed, in PN this is the
case, but not in Xaraya. What is important is the "distance" where the
privilege comes from. For example, a READ from a father is stronger than an
EDIT from a grandfather.

> >> 4. Are access levels has inheritance?
> >>
> Does each upper level include rights of others lowers?
> m> Sorry, I don't understand questions 3 and 4

Yes, as described in Voll's post. The exception is NO_ACCESS, which is a
deny.

> 5.  And  I forget to ask most important question. What is main idea of
> Privileges  system  -  'all  that not directly denied is permitted' or
> 'all that not directly permitted is denied'? Another one? ;)

The seecond, as describeed in Voll's post.

Marc