Customer-user capbilities are granted to different resources: system, customer, user. When a user interacts with HsM in the context of a specific customer the effective capabilities are calculated based on following logic.
Overall the effective capability availability level ae for a capability p in the capability context of user u and customer c is calculated as: ae = min(as, max(ac, au)) with as being the system capability availability level, au the user capability availability level and ac the customer capability availability level, as defined below.
System capability availability level
The Client Service evaluates the system capability availability availability level as for the capability c using following rules:
•If there is no system capability grant for capability p, as is set to hidden. As a result ae will always be hidden.
•If there is a system capability grant for capability p, and the capability level is set to hidden then as is set to hidden. As a result ae will always be hidden.
•If there is a system capability grant for capability p, and the capability not hidden, as is set to that availability level.
User capability availability level
The Client Service evaluates the user capability availability availability level au for the capability p using following rules:
•If there is no user capability grant for capability p and user u, au is set to hidden.
•If there is a user capability grant for capability p and user u, au the availability level of this grant.
Customer capability availability level
The Client Service calculates the customer capability availability level ac for the capability p on customer c using following rules:
•if there is a capability grant for capability p on customer c then ac is set to the capability level of that grant. and the calculation ends.
•else the capability level ac is evaluated by looking at all customers on the non-inclusive relationship paths of customer c for the reseller relationship, hierarchy relationship and facility-management relationship
oFor each non-inclusive relationship path the capability level arelationhsiptype is calculated as follows
▪Let R = {c0, c1, .....croot} be the customers on the non-inclusive path of the relationship of customer c, with c0 being the ancestor of c .
▪Find the closest customer to customer c with a capability grant for capability p and a propagation setting for that relationship. If found the capability level for that relation ship path ar is set to that level if no customer on the path has a capability grant ar is set to hidden
o ac is set to max (areseller, ahierarchy, afacility-management)
