The SEDRIS Data Representation Model
APPENDIX A - Classes Access |
---|
An instance of this DRM class specifies the security classification and any access and / or usage constraints for its containing SEDRIS object, provided in a form compatible with [ISO 19115].
Given a <Transmittal Root> that has
restricted access (no access by non-U.S. citizens) and is for
official use only, its
<Access> information might be
access_constraints
=
SE_RESTR_CODE_RESTRICTED;
use_constraints
=
SE_RESTR_CODE_OTHER_RESTRICTIONS;
other_constraints
= "For Official Use Only";
security.
classification =
SE_SEC_CL_CODE_SECRET;
security.
user_note
= "No access by non-U.S. citizens";
security.
classification_system
= "United States Department of Defense";
security.
handling_description
= "Downgrade on 31 Dec 2004";
use_limitation
= "";
This class supports the creation of SEDRIS transmittals that contain classified or sensitive data.
In general, the rules for security classification metadata for the SEDRIS objects within a transmittal are the same as the rules for security classification markings of the paragraphs and sections within a hierarchically structured classified document. The security classification of an object shall be at least as high as the highest of the security classifications of its components, and may be higher if the aggregation of the components allows additional information to be inferred. Therefore, the security classification of an object shall be no higher than the security classification of its containing object. Unclassified objects need not have an <Access> component, unless they are unclassified components of a classified containing object.
The access_constraints field expresses access constraints applied to assure the protection of privacy or intellectual property, and any special restrictions or limitations on obtaining the resource being described by the given instance of <Access>.
The use_constraints field expresses constraints applied to assure the protection of privacy or intellectual property, and any special restrictions or limitations or warnings on using the resource being described by the given instance of <Access>.
The other_constraints field specifies other restrictions and legal prerequisites for accessing and using the resource being described by the given instance of <Access>.
The security field specifies the security classification for the given data object.
If non-empty, the use_limitation field specifies a limitation affecting the fitness for use of the resource being described by the given instance of <Access>.
|