Certain Privileges on a resource may be inherited by it's child resources - for example, if Anonymous user role is granted view recursive privilege on a Home page of a Site, the anonyoums users are also allowed to view all sub pages of the site (that are visible due to Workflow and Page validity time considerations).
Ineritability (recursiveness) of a Privilege is specified by it's Privilege template and cannot be changed. For a finer access control, for each inherited privilege template, a non-inherited template is also provided.
Labels: