CMIS is defined around the interactions between a client application and single repository. The repository is a container of objects (documents, folders etc..). In order to be CMIS compliant there is some mandatory functionality that the repository must support and there are some optional capabilities that the repository may support.
In order to get started, the client will need to know the starting URI needed to access the Repository via the desired binding (SOAP or REST). Armed with that URI, the client is then in a position to:
There are 14 optional capabilities that a CMIS compliant repository may support. The level of support indicated only specifies what level of support there is for the capability via a CMIS client. Some capabilities that are listed as not being available may be available via proprietary interfaces to the repository. Below is a list of the optional capabilities:
Object represent the entities that are in the repository. Each object has a type. There are 4 base types defined by CMIS, Documents, Folders, Relationships and Policies. Every object in the repository will be derived from one of these types. An object will be identified by an Object ID and will have a set of properties associated with it. The properties that an object has is defined by its Object Type. The CMIS specification does specify how new object types are created.
In addition to the metadata properties that define object types, there are some additional attributes that govern some of the behavior of objects within the repository they are listed below
Properties are named values that are associated with each object type. Properties are of a specific type (date, integer, text etc...). Properties can be single valued or multi valued, required or optional. Some properties may be read only or only updatable at certain times. One point to note is that properties can have different names associated with them their display name, ID and query name may all be different.
Document objects represent the enties that we really come to the repository for, the content. Document objects (and only document objects) may have Content Streams (the actual file associated with the document). In some cases it makes sense to have document objects without content streams. Content streams exist only as part of a containing document object. The content stream will have a mimetype associated with it. In addition to a content stream, a document object may contain one or more renditions (alternate views of the content).
Documents objects are also the only objects that are versionable, or for which versions can be exposed via CMIS. Each version of a document object will have their own object ID. All versions of a document make up a Version Series and will share a Version Series ID.
Folder objects are containers used to organize the document objects within the repository. With the obvious exception of the root folder, folder objects must have one and only one parent folder. A folder has a folder path that is automatically generated representing its place in the repository's hierarchy. A folder object may be defined in a way the limits what object types can it can contain (for example, an accounting related folder could be defined to only contain document objects of type invoice). A folder object may have renditions (for example a folder may have a thumbnail as a rendition representing what is in the folder).
Relationship objects define a non-invasive two way relationships between two objects (source and target) in the repository. Manipulating the relationships should not effect any changes to either the source or target objects. Relationship objects are optional for CMIS compliant repositories.
Policy objects are optional repository specific objects that can be applied to controllable objects. The behavior of policies are not modeled by the CMIS specification. A single policy object may be applied to multiple controllable objects and a single controllable object may have multiple policies applied to it. In order to preserve referential integrity, a policy object can not be deleted if it is applied to one or more controllable objects.
Renditions are alternate views of the content stream such as previews, PDF renditions and thumbnails. It is also possible to have a thumbnail rendition object without content streams (i.e. folders). Renditions attributes must include a Stream ID and a mimetype. Additional common attributes for rendition are length, title and kind. The only kind of rendition that the CMIS specification defines is a thumbnail. Thumbnail renditions should only include height and width as attributes. The repository may define its own rendition types in addition to thumbnails.
Renditions cannot be queried unless they have a Rendition Document ID, that allows them to be exposed as documents.
Access control is used to specify who can do what with an object in the repository. If the repository supports access control then access control lists are applied to each object within the repository. Access control lists specify what types of access or permissions (read, write etc..) to an object are given to groups or users (known collectively as principles). CMIS defines three permissions cmis:read, cmis:write and cmis:all. When setting an ACL cmis:user can be used to represent the current authemticated user.
The repository may have an optional change log that contains an entry for each change made to content in the repository. Each entry has a Change Log Token. The repository must expose the latest change log token if it support change logs. Change log entries include the object ID and the change type (created, updated, deleted or security). Armed with a change log token, a client could retrieve the list of objects that have been changed since the change was made.
A change log need not contain every change for the life of the repository, but it must contain every change made since the earliest change in the log.