Share via

RIGHTSLIST

[The AD RMS SDK leveraging functionality exposed by the client in Msdrm.dll is available for use in Windows Server 2008, Windows Vista, Windows Server 2008 R2, Windows 7, Windows Server 2012, and Windows 8. It may be altered or unavailable in subsequent versions. Instead, use Active Directory Rights Management Services SDK 2.1, which leverages functionality exposed by the client in Msipc.dll.]

Specifies a collection of rights for a RIGHTSGROUP element. This element has the following definition.

<!-- Individual rights -->
<!ELEMENT RIGHTSLIST (RIGHT | SELL | COPY | LOAN | 
                      TRANSFER | RETURN | PLAY | PRINT |
                      VIEW | EXPORT | EDIT | EXTRACT | EMBED |
                      BACKUP | RESTORE | VERIFY | FOLDER | DIRECTORY |
                      DELETE | INSTALL | UNINSTALL)+>

<!-- Generic Right -->
<!ELEMENT RIGHT (DESCRIPTION?,
                 SECURESTORE?,
                 PRECONDITIONLIST?,
                 CONDITIONLIST?,
                 NEXTRIGHTS?,
                 PLAYER?,
                 SOURCE?,
                 DESTINATION?,
                 PARAMETER*)>
<!ATTLIST RIGHT
  name CDATA #REQUIRED
  type CDATA #IMPLIED
  id CDATA #IMPLIED>

<!-- Print Right -->
<!ELEMENT PRINT (PRINTER?,
                 DESCRIPTION?,
                 SECURESTORE?,
                 PRECONDITIONLIST?,
                 CONDITIONLIST?,
                 PARAMETER*)>
<!ATTLIST PRINT
  id CDATA #IMPLIED>

<!-- View Right -->
<!ELEMENT VIEW (VIEWER?,
                DESCRIPTION?,
                SECURESTORE?,
                PRECONDITIONLIST?,
                CONDITIONLIST?,
                PARAMETER*)>
<!ATTLIST VIEW
  id CDATA #IMPLIED>

<!-- Export Right -->
<!ELEMENT EXPORT (REPOSITORY?,
                  DESCRIPTION?,
                  SECURESTORE?,
                  PRECONDITIONLIST?,
                  CONDITIONLIST?,
                  PARAMETER*)>
<!ATTLIST EXPORT
  id CDATA #IMPLIED>

<!-- Edit Right -->
<!ELEMENT EDIT (EDITOR?,
                DESCRIPTION?,
                SECURESTORE?,
                PRECONDITIONLIST?,
                CONDITIONLIST?,
                NEXTRIGHTS?)>
<!ATTLIST EDIT
  id CDATA #IMPLIED>

<!-- Extract Right -->
<!ELEMENT EXTRACT (EDITOR?,
                   DESCRIPTION?,
                   SECURESTORE?,
                   PRECONDITIONLIST?,
                   CONDITIONLIST?,
                   NEXTRIGHTS?)>
<!ATTLIST EXTRACT
  id CDATA #IMPLIED>

Remarks

The predefined rights typically used in an Active Directory Rights Management Services (AD RMS) license, such as VIEW and PRINT, are listed below the RIGHTSLIST element in the preceding definition. AD RMS also uses the RIGHT element to define custom rights. The meanings of the rights typically used in AD RMS are defined in the following table.

Right Type Meaning
DOCEDIT Custom Edit the content.
EDIT Predefined Save the content.
EXPORT Predefined Save the content under a different file name (Save As). Note that, depending on the application, the file might be saved without protection.
EXTRACT Predefined Extract the unencrypted content.
FORWARD Custom Forward the content.
OWNER Custom Grant full control.
PRINT Predefined Print the content.
REPLY Custom Reply to the sender.
REPLYALL Custom Reply to all parties listed.
VIEW Predefined View the content.
VIEWRIGHTSDATA Custom View the available rights.

Examples

The following example shows a RIGHTSLIST element that contains a single EDIT right. The right contains a CONDITIONLIST that stipulates limits on that right.

<RIGHTSGROUP name="Main-Rights">
  <RIGHTSLIST>
    <EDIT>
      <CONDITIONLIST>
        <ACCESS>
          <PRINCIPAL internal-id="1">
            <ENABLINGBITS type="sealed-key">
              <VALUE encoding="base64" size="1536">...</VALUE> 
            </ENABLINGBITS>
          </PRINCIPAL>
        </ACCESS>
        <TIME>
          <INTERVALTIME days="30"/> 
        </TIME>
      </CONDITIONLIST>
    </EDIT>
  </RIGHTSLIST>
</RIGHTSGROUP>

Requirements
Product
 Rights Management Services client 1.0 or later

See also

BODY

WORK