Managing permissions on external content types
The ECT is just one of the BDC metadata store objects for which you can set permissions, as described in Table 2.
These permissions affect the interface between the SharePoint server
and the presentation layer; that is, they do not define the
authentication and security settings between the SharePoint server and
the external system—those security settings are defined in the external
system definition. The other objects present in the BDC metadata store
that have their own access control list (ACL) are the BDC model and
external system definitions. These permissions can be set by using the
SharePoint Central Administration website or Windows PowerShell.
Table 2. BDC model object permission settings
Permission
|
Applies to
|
Description
|
---|
Edit |
Access-controlled metadata objects |
Users with this permission can perform the following actions:
Update
Delete
Create a child object
Add a property
Remove a property
Clear a property
Add a localized display name
Remove a localized display name
Clear a localized display name
Give edit rights to administrators and users who use SharePoint Designer. |
Execute |
ECT, Method Instance |
Users with this permission can execute operations via various
run-time API calls; that is, they can view the data of an ECT returned
from a finder method. In most scenarios, you would assign this right to
all users who have access to SharePoint. |
Selectable In Clients |
ECT |
Users with this permission can use the external data picker to
configure web parts and lists and create external lists. This
permission should be available to administrators and users who design
solutions using the browser or SharePoint Designer. |
Set Permissions |
Individually securable metadata objects |
Users with this permission can manage BCS permissions on the object.
This permission is usually given only to BCS service application
administrators. |