Grants permission to other users to access your data.
Sets permission for access to EntitySets or relationships.
PERMISSION object who [READ] [ADD] [CHANGE] [DELETE]
| object | Specifies the name of an EntitySet or relationship. |
| who | Identifies the users to whom the specified object permissions apply; who can be OWNER Anyone who shares the UserID under which object was created. GROUP Anyone who shares the GroupID under which object was created. OTHER Everyone else. |
| READ | Gives the designated users permission to read the contents of object. |
| ADD | Gives the designated users permission to add to the contents of object (implies READ). |
| CHANGE | Gives the designated users permission to change the contents of object (implies READ). |
| DELETE | Gives the designated users permission to delete the contents of object (implies READ). |
Sets permission for access to fields or application directories.
PERMISSION object who [READ] [UPDATE]
| object | Specifies the fully qualified name of an application directory of field. |
| who | Identifies the users to whom the specified object permissions apply; who can be OWNER Anyone who shares the UserID under which object was created. GROUP Anyone who shares the GroupID under which object was created. OTHER Everyone else. |
| READ | Gives the designated users permission to read the contents of object. |
| UPDATE | Gives the designated users permission to update the contents of object. |
Only the owner of an object can reset that object's permissions.
To access a directory, you must have READ or UPDATE permission. To CREATE, ERASE, or RENAME objects in a directory, you must have UPDATE permission. By default, all users have UPDATE permission in a directory.
permission Employees owner add change
Gives only add or change permission to the owner.
permission Employees other
Gives no access by users outside the owner's group.
permission Employees.LastName group read update
Users in owner's group can read but not update.
permission MyDir group update
permission MyDir other
Users in the owner's group can read the MyDir directory and can create, erase, or rename objects in it. Other users are to have no access to MyDir.