Certain permissions, for example, on folders, apply on the folder object itself, so the user to whom it was granted a permission, can view or delete a folder, but that's it - as other permissions are needed to access the content of the folder.

Therefore, we can say that the permissions that apply on the folder object itself are permissions on the "container object" - folder is in that case, a container of other objects.

The permissions that apply on the content in the folder are permissions on the "contained objects". The latter are typically marked as RefR and RefW.

For more information, see Objects access permissions.

Which objects can be both "container" and "contained"?

Folders can be containers, but can also be contained by the parent folders. The same applies on the publishing destinations and on the collections.

The list is not exhaustive.

Which objects can only be "container" but not "contained"?

Config scope, security scope, typography, font layouts, etc. can only be "containers".

The list is not exhaustive.

Which objects can only be "contained"?

Articles, article elements, images, audio, video, editorial image, document, fonts, etc. can only be "contained".

The list is not exhaustive.