Portal Express, Version 6.0
Operating systems: i5/OS, Linux, Windows
Nested groups
Read about how nested groups are supported to enable simple inheritance of access control.
Two groups are nested if one of the groups contains the other group as a member. The access control system treats this as though all members of the contained group are also members of the containing group. In other words, permissions for nested groups are treated as cumulative. One group, GlobalMarketing, could for example contain another group, USMarketing, resulting in all members of USMarketing being treated as members of GlobalMarketing. This means that members of USMarketing inherit the access rights granted to GlobalMarketing members. So, if GlobalMarketing has view access to the File Server portlet, and USMarketing has view access to the World Clock portlet, USMarketing has view access to both the File Server and World Clock portlets. For example, Joe as a member of the GlobalMarketing group, can only access File Server portlet, but Susan as a member of the USMarketing group can access both portlets.