Roles and Explicit Permissions

When defining permissions, whether it is a global permission or set on a particular project or configuration, you can either assign a role to a group or user, or assign specific permissions, or a mixure of both. Both roles and explicit permissions are designed to work together and Continua will figure out which permissions should be applied from both the role and explicit permissions list. 

Allow and Deny Permissions

When you define permissions on a role, you are only able to assign allow permissions to that role. This was designed so that roles can be assigned with minimal fuss by automatically including all derived permissions as well. For example, if you assign edit configuration to a role, that role will automatically get view configuration as well. WIthout these automatic inclusions, if you forgot to add a single permission then it could hide alot of the functionality of Continua. As in the previous example, without view configuration you would never be able to see a configuration to edit it!

...