The various stages of rights assignments in Picturepark are:
There are no user rights directly on individual users, but on user groups. User groups are thereby understood as roles, that can carry out specific functions in Picturepark for example editors and adminstrators. The allocation of rights to the user takes place via the assignment of a user to one or more user groups. The user receives all the accumulated rights from all the user groups he is assigned to.
The rights of the user groups control general functions (editing and creation of assets and the management of Picturepark) and are further restricted by category and asset rights.
The category rights define, which areas of the structure (asset classes, tags/categories) are visible and/or editable for the user groups. If a user group does not have the rights to see a category, then the contents of the category are also not available (even when the asset rights allow the viewing of the contents). Nevertheless category rights are not inherited to the assets in a category.
Asset rights pertain directly to the asset. They control which assets a user group can see and edit. Therefore, assets in the same category can be assigned different rights. So for example in the "Year-2013" category, user group A only sees assets with the "public" right, whereas user group B can see all the assets in this category.
Derivative rights control the access of user groups on the individual derivatives of an asset and are set on individual assets. In this way it is possible to only give a user group access to the watermark format of an image.
A rights dependency is created: