After records are transferred and the transfer is verified, the Records Manager should delete the original record metadata and the electronic file. This file can be then stored as a record of the transfer action. During disposition processing, all records in the R 2 M database marked for destruction were deleted from the database and repository. The associated record profile data was also deleted. The records were deleted in such a way that they could not be reconstructed by a file recovery utility.
Access control is provided by assigning work group permissions and file code.
Users are granted access based on their group assignment and personal file code permissions. The most restrictive collection of permissions is enforced. If a user belongs to a group that has fewer rights than the user, his or her permissions are curtailed. All users must belong to a group. R 2 M groups must be created before user accounts.