A single access control entry (ACE) on a template definition: one trustee, whether its rights are allowed or denied, and the rights themselves. A trustee that has both allowed and denied rights is represented as two ACEs. Unlike entry ACEs, template ACEs have no scope and are never inherited.

interface ITemplateAccessControlEntry {
    accessControlType?: AccessControlType;
    inheritedFrom?: string;
    isInherited?: boolean;
    rights?: TemplateRight[];
    trustee?: TrusteeIdentity;
}

Implemented by

Properties

accessControlType?: AccessControlType

Whether the ACE grants (Allow) or denies (Deny) the listed rights. Required on input — a missing value is rejected (it must not silently default to Allow).

inheritedFrom?: string

When inherited, a description of where the ACE was inherited from. Output only; null for template ACEs.

isInherited?: boolean

True when this ACE is inherited. Always false for template ACEs (template definitions have no ACL inheritance); returned for contract symmetry and ignored on input.

rights?: TemplateRight[]

The rights granted or denied by this ACE.

trustee?: TrusteeIdentity

The trustee this ACE applies to. On input, identify the trustee by either trustee.sid or trustee.accountName (the SID takes precedence when both are given).