The ControlMethodsCombineAlgorithm enumeration contains permission combination algorithm by attribute-based and discretionary access control method.
It is used by the IMetabasePolicy.MethodsCombineAlgorithm property.
When attribute-based and discretionary methods are used simultaneously, there is use of permission combination algorithm:
AND. The operation is allowed if the operation is allowed simultaneously for two access control methods. If the operation is denied for one of access control methods or access permissions are undefined, the operation is denied
OR. The operation is allowed if operation permission is set up for at least one of access control methods, and access permissions are undefined for the other access control method. If the operation is denied for one of access control methods, the operation is denied.
Value | Brief description |
1 | Default_. By default. The AND combination algorithm is used. |
1 | Deny. The AND combination algorithm is used. |
3 | Permit. The OR combination algorithm is used. |
See also: