Share via

BdcAccessControlList Class

  • Article

Contains a list of access control entries, specifying access rights for one or more trustees in the Business Data Catalog.

Inheritance Hierarchy

System.Object
  Microsoft.Office.Server.ApplicationRegistry.Infrastructure.BdcAccessControlList

Namespace:  Microsoft.Office.Server.ApplicationRegistry.Infrastructure
Assembly:  Microsoft.SharePoint.Portal (in Microsoft.SharePoint.Portal.dll)

Syntax

'Declaration
<SharePointPermissionAttribute(SecurityAction.Demand, ObjectModel := True)> _
<SharePointPermissionAttribute(SecurityAction.InheritanceDemand, ObjectModel := True)> _
Public Class BdcAccessControlList _
    Implements IAccessControlList

'Usage
Dim instance As BdcAccessControlList

[SharePointPermissionAttribute(SecurityAction.Demand, ObjectModel = true)]
[SharePointPermissionAttribute(SecurityAction.InheritanceDemand, ObjectModel = true)]
public class BdcAccessControlList : IAccessControlList

Remarks

A BdcAccessControlList object extends the Windows SharePoint Services 3.0 access control list (ACL) and identifies the trustees that are allowed or denied access to a securable metadata object. When a process tries to access a securable metadata object, the Business Data Catalog checks the access control entries in the object's ACL to determine whether to grant access to it. If the object does not have an ACL, the system denies access to everyone. If the object's ACL has no entries, the system denies all attempts to access the object.

There are two types of trustees in the Business Data Catalog - access controlled metadata objects and individually securable metadata objects. Access controlled metadata objects are metadata objects whose access can be controlled by permissions. All 13 metadata objects inherit from this class and therefore, can be controlled by permissions. Individually securable metadata objects on the other hand, are metadata objects whose access can be individually controlled. Only LOBSystem, Entity, Method, MethodInstance are individually securable. The other metadata objects rely on their individually securable ancestor to propagate the permissions to them. This implies that the latter, an individually securable metadata object, is the only one on which you can set an ACL; you can get an ACL from both access controlled metadata object and individually securable metadata object.

Thread Safety

Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.

See Also

Reference

BdcAccessControlList Members

Microsoft.Office.Server.ApplicationRegistry.Infrastructure Namespace