Class Name: Access

Superclass - <SEDRIS Abstract Base>

Subclasses

Definition

An instance of this DRM class specifies the security classification and any access and / or usage constraints for its containing SEDRIS object, provided in a [CSDGM]-compliant form.

Primary Page in DRM Diagram:

• 1

Secondary Pages in DRM Diagram:

• 2
• 3
• 6
• 8
• 10
• 14
• 19
• 21
• 22
• 23

Example

1. Given a <Transmittal Root> that has restricted access (no access by non-U.S. citizens) and is for official use only, its <Access> information might be
   access_constraints = "NOFORN";
   use_constraints = "FOUO";
   security. system = "United States Department of Defense";
   security. classification = "SECRET";
   security. handling = "Downgrade on 31 Dec 1999";
   

FAQs

What is the purpose of this class?

This class supports the creation of SEDRIS transmittals that contain classified or sensitive data.

How is the security classification of a SEDRIS object related to the security classifications of its component objects, or to the security classification of its containing object?

In general, the rules for security classification metadata for the SEDRIS objects within a transmittal are the same as the rules for security classification markings of the paragraphs and sections within a hierarchically structured classified document. The security classification of an object shall be at least as high as the highest of the security classifications of its components, and may be higher if the aggregation of the components allows additional information to be inferred. Therefore, the security classification of an object shall be no higher than the security classification of its containing object. Unclassified objects need not have an <Access> component, unless they are unclassified components of a classified containing object.

Constraints

• <<Mandatory Metadata>>

Component of (two-way)

• zero or more <Attribute Set> instances
• zero or more <Attribute Set Table> instances
• zero or more <Attribute Set Table Group> instances
• zero or more <Colour Table> instances
• zero or more <Colour Table Group> instances
• zero or more <Data Table> instances
• zero or more <Environment Root> instances
• zero or more <Feature> instances
• zero or more <Feature Model> instances
• zero or more <Geometry Hierarchy> instances
• zero or more <Geometry Model> instances
• zero or more <Image> instances
• zero or more <Library> instances
• zero or more <Model> instances
• zero or more <Sound> instances
• zero or more <Symbol> instances
• zero or one <Transmittal Root> instance

Inherited Field Elements

Field Elements

Notes

Fields Notes

access_constraints

 This specifies the restrictions on access to the given
 data object (Optional).

use_constraints

 This specifies the restrictions on use of the given
 data object (Optional).

security

 This specifies the security classification for the given
 data object (Mandatory)