|
|
|
The basic mode of user authorization is always enabled. You can enable or disable the advanced mode at your site. The Notification Website always checks the basic privileges data, and only checks the advanced permissions data if the Advanced LDAP Permissions mode is enabled.
The two modes of user authorization are evaluated according to a combinatory-granting rule; that is, authorizations that are granted to subjects from both authorization modes are combined. This means that an authorization is considered granted if it is granted in either the basic mode or the advanced mode, or in both; an authorization is considered denied if it is not granted at the basic mode level and not granted at the advanced mode (if that mode is enabled).
| Copyright © 2012 CA. All rights reserved. |
|