|
The SEDRIS Data Representation Model
APPENDIX A - Classes Access |
|---|
An instance of this DRM class specifies the security classification and any access and / or usage constraints for its containing DRM object, provided in a form compatible with ISO 19115.
Given a <Transmittal Root> instance that has
restricted access (no access by non-U.S. citizens) and is for
official use only, its
<Access> instance's information might be
access_constraints
= SE_RESTR_CODE_RESTRICTED;
use_constraints
= SE_RESTR_CODE_OTHER_RESTRICTIONS;
other_constraints
= "For Official Use Only";
security.
classification =
SE_SEC_CL_CODE_SECRET;
security.
user_note
= "No access by non-U.S. citizens";
security.
classification_system
= "United States Department of Defense";
security.
handling_description
= "Downgrade on 31 Dec 2004";
use_limitation
= "";
This class supports the creation of transmittals that contain classified or sensitive data.
In general, the rules for security classification metadata for DRM objects within a transmittal are the same as the rules for security classification markings of the paragraphs and sections within a hierarchically structured classified document. The security classification of a DRM object shall be at least as high as the highest of the security classifications of its component DRM objects, and may be higher if the aggregation of the component DRM objects allows additional information to be inferred. Therefore, the security classification of a DRM object shall be no higher than the security classification of its containing DRM object. Unclassified DRM objects need not have an <Access> component, unless they are unclassified components of a classified containing DRM object.
|