The ControlMethodsCombineAlgorithm enumeration contains permission combination algorithms by attribute-based and discretionary access control method.
It is used by the IMetabasePolicy.MethodsCombineAlgorithm property.
When attribute-based and discretionary methods are used simultaneously, there is use of permission combination algorithm:
AND. The operation is allowed if the operation is allowed simultaneously for two access control methods. If the operation is denied for one of access control methods or access permissions are undefined, the operation is denied.
OR. The operation is allowed if operation permission is set up for at least one of access control methods, and access permissions are undefined for the other access control method. If the operation is denied for one of access control methods, the operation is denied.
Value | Brief description |
1 | Default_. Default value. The AND combination algorithm is used. |
1 | Deny. The AND combination algorithm is used. |
3 | Permit. The OR combination algorithm is used. |
See also: