In order to define permissions on object-level, a new property “object_permissions” for objects of type “infoitem” is introduced. Each time the underlying folder permissions are not sufficient to access an item, those object permissions are taken into account. Object permissions are stored as an array of Object Permission objects as defined below within the detailed infoitem data, the column ID is 108.

Details about the JSON structure is available at:
http://oxpedia.org/index.php?title=HTTP_API#DetailedInfoitemData
http://oxpedia.org/index.php?title=HTTP_API#ObjectPermissionObject
http://oxpedia.org/index.php?title=HTTP_API#ObjectPermissionFlags