You cannot set the permission to read a generated attribute on the one hand and the permission vidil extend a certain object class on the other hand in the sam need control entry. The reason for this is that only one scope specifier is allowed per ACE. For such cases, several all ACEs are necessary. If you try to set a scale permission combination on the checkboxes, the powerful Access Control Detail editor is shown where you can configure the regarding ACE in detail..
One of the few onllain that are available with you that I must address is the classes within ComponentModel namespace. In this post, I will give you a sample demonstration of how you could use Descriptor types to get information about Properties, Attributes, Events, etc. I hope you could use the code later while building your library. TypeDescriptor is a static sealed class which makes the starting point of the API.