Lets Look at the Specifies permissions that are used to define user roles
emptyMask - Has no permissions on the Web site. Not available through the user interface.
viewListItems - View items in lists, documents in document libraries, and Web discussion comments.
addListItems - Add items to lists, add documents to document libraries, and add Web discussion comments.
editListItems - Edit items in lists, edit documents in document libraries, edit Web discussion comments in documents, and customize Web Part Pages in document libraries.
deleteListItems - Delete items from a list, documents from a document library, and Web discussion comments in documents.
approveItems - Approve a minor version of a list item or document.
openItems - View the source of documents with server-side file handlers.
viewVersions - View past versions of a list item or document.
deleteVersions - Delete past versions of a list item or document.
cancelCheckout - Cancel or check in a document that is checked out to another user.
managePersonalViews - Create, change, and delete personal views of lists.
manageLists - Create and delete lists, add or remove columns in a list, and add or remove public views of a list.
viewFormPages - View forms, views and application pages, and enumerate lists.
open - Open a Web site, list, or folder to access items inside the container.
viewPages - View pages in a Web site.
addAndCustomizePages - Add, change, or delete HTML pages, and edit the Web site using an editor that is compatible with Microsoft SharePoint Server 2010.
applyThemeAndBorder - Apply a theme or borders to the Web site.
applyStyleSheets - Apply a style sheet (.css file) to the Web site.
viewUsageData - View reports on Web site usage.
createSSCSite - Create a Web site using Self-Service Site Creation.
manageSubwebs - Create subsites such as team sites, Meeting Workspace sites, and Document Workspace sites.
createGroups - Create a group of users that can be used anywhere within the site collection.
managePermissions - Create and change permission levels on the Web site and assign permissions to users and groups.
browseDirectories - Enumerate files and folders on a site using Microsoft SharePoint Designer and WebDAV interfaces.
browseUserInfo - View information about the users of the Web site.
addDelPrivateWebParts - Add or remove personal Web Parts on a Web Part Page.
updatePersonalWebParts - Update Web Parts to display personalized information.
manageWeb - Grant the ability to perform all administration tasks for the Web site and manage Web site content.
useClientIntegration - Launch client applications on the server. Otherwise, users must work on documents locally and upload changes.
useRemoteAPIs - Use SOAP, WebDAV, or Microsoft SharePoint Designer interfaces to access the Web site.
manageAlerts - Manage alerts for all users of the Web site.
createAlerts - Create e-mail alerts.
editMyUserInfo - Change user information, such as adding a picture.
enumeratePermissions - Enumerates permissions on the Web site, list, folder, document, or list item.
fullMask - Has all permissions on the Web site. Not available through the user interface.
Ads by Google