Open Source Document Management System | OpenKM

Hi,

Which permission will take precedence, User or Group?

Thanks.


Cinto

Permission are based on adding privileges ( not precedences among roles ) sum (Role1, Role2, etc... ). Everything can be done with it.

Hi Jllort,

Thanks for the explanation.

Is there a way to do this: allow the whole group except for one of them to, say edit the file?


Cinto

Ufff probably that could be possible, but it'll be needed changing some logic on security. As I can say to you is that kind of change is not trivial. And I think with actual type of grants all possible cases are covered, probably with major effors for administrator in your case, with more roles granularity, but covered. Normally making changes in a more complex logic is not a great idea.

If you've got problems setting some kind of security, explain and we'll try found some way for doing it as easilly as possible. Probably your problem could be easilly solved with other taxonomy structure.

Hi Jllort,

The scenario is like this: we have a guest user in the group. He should only be able to view the documents. The rest of the group members should be able to edit and view the documents.

How can we configure the security for this scenario?


Cinto

When you talk about view, you're thinking in read grant ( can downloading files ) or you don't want user downloading files ?

Hi Jllort,

Yes, we do allow the guest to download the files.


Cinto

This is the most simply scenario. Simply create two roles GuestTole and CompanyRole. Assign GuestRole to guest users and CompanyRole to other. In security tab ( document / folders ) put only read grant to GuestRole and Others ( read / write / delete ) to CompanyRole ( about change secutiry grant, that's in your hand setting who can change it ).