|read||view bag's tiddlers||view bag-filter pairs constituting the recipe|
|write||modify bag's tiddlers||unused|
|create||add tiddlers to bag||unused|
|delete||remove tiddlers from bag||unused|
|manage||delete bag, view and modify its policy||delete recipe, view and modify its policy|
|accept||skip validation for tiddlers||unused|
An empty constraint list means there is no constraint; any user, including the anonymous user
GUEST, can perform the action.
NONEmeans the action may not be done, by anyone;
ANYmeans any authenticated user (i.e. not
GUEST) may perform the action.
If either of
ANYare listed in a constraint, nothing else should be listed.