Hi pavila, would you like to give me the solution?

[chang.x.wang]

Hi,

I make the folders as followed:
folder1
_ |--folder2
___|--folder3

and there are there role in my openKM: role1,role2 and role3.

now, I want to let role1 can read these 3 level folders, role 2 can read folder2 and folder3, and role3 can read folder3 olny, so I set the folder's sucurity as bellow:
______ role1 role2 role3
folder1 _yes_ _no_ _no_
folder2 _yes_ _yes _no_
folder3 _yes_ _yes_ yes_

but, When login as the uesr3 wiht role3, I can not found the folder1 so i can not access folder3.

How to let user2 can only look folder name "folder1" and "folder2" but can not read any documents in these(like in linux)?

[chang.x.wang]

any body can give the solution.........

thanks !

[jllort]

you need read access for role3 to folder1 if you want accessing folder3 and same to folder 2 other case is not possible. You're on confusion if you can accessing parent you can not accessing child, other question is that althought have accessing to folder2 ( read ) can not read contents ... but by default any file upload there will have accessing to user3 too if you don't remove this grant ( could be done automatically removed by scripting ).

Your security purpose is not good, I recommend study other taxonomy structure that not seems correct in security privileges

[chang.x.wang]

jllort, thanks a lot.