Recall that authorization pertains to controlling access to functionality. User-specific authorization can be enforced by the client applications as well as the Content Server. Client applications utilize a user's client capability to enforce access control for functionality within the client application. They can also utilize roles to manage access to functionality within the applications. Roles are discussed in Groups and Roles (Chapter 6).
On the other hand, Content Server utilizes basic and extended privileges to enforce access control. As we will see in later chapters, Content Server also enforces object security in addition to these privileges.
The client_capability property of dm_user stores the client capability level. This information is available for all users, but it is up to the client applications to utilize this information for enforcing additional access control.
Documentum's client applications such as Webtop and Desktop assign specific meanings...