Permissions define access levels to content for reviewers on a project and are set by project admins.

Reviewers with manage permissions can't alter permissions, but items posted by them inherit existing permissions/reviewer access levels by default. Project admins can modify the default permissions settings.
 

Generally, care should be taken by project admins if they allow reviewers with manage permissions to create folders and subfolders. Again, by default, these items inherit the permissions set on the parent fileroom or folder. For example, files and folders are viewable upon publishing if the parent folder is viewable.

It is strongly encouraged that reviewers with manage permissions request a review of their permissions settings from a project admin before they publish content.