3.2.6.3 Permission Changes

Protocol clients know permissions have changed by comparing GetListItemChangesSinceTokenResponse.GetListItemChangesSinceTokenResult.listitems.EffectivePermMask (see [MS-LISTSWS]) to the last value they received from that attribute. If the values differ then permissions changed. Clients SHOULD discard their change token and restart this protocol when permissions change. Any items not received upon completion of this protocol SHOULD be deleted from the protocol client. Protocol clients SHOULD do this because protocol servers will not give protocol clients information about items they do not have access to. If the protocol client does not do this, a permission change can result in items remaining on the protocol client after the protocol client loses access to them.