Access of Role to Object rules
Completing the New or Save As form

An Access of Role to Object rule has two key parts. Each rule links an access role and a class.

Field	Description
Type	Select Access of Role to Object from the Security category.
Role Name	Enter an existing access role name.
Access Class	Identify an abstract or concrete class that users who hold this access role need to access in some way. Enter the full class name. To provide uniform access to both a parent class and all its subclasses, enter the parent class name.

Enter a RuleSet name, for the Export Archive tool use. This RuleSet name does not affect rule resolution processing.

Access of Role to Object rules are not subject to rule resolution and affect all users on a system. As a best practice to avoid confusion and difficult-to-debug security configurations, place each Access of Role to Object rule in the same RuleSet as the RuleSet of the Access Class — the second key part.

For general information on the New form, see Completing the new rule dialog box. For general information on the Save As form, see How to enter rule keys using Save As.

Rule resolution

Rule resolution does not apply to Access of Role to Object rules. Your system can contain at most one Access of Role to Object rule for each Applies To class and Role Name combination. Stated another way, you can't override Access or Role to Object rules.

About Access of Role to Object rules