<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Is there a Restricting Permission? in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/is-there-a-restricting-permission/m-p/258703#M211833</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi folks,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;is there a way to explicitly deny a user to see specific folders in a space.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Group A: Engineer1 Engineer2&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;User:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; NonEngineer1&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Space 1&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; accessable and visible by Group A&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp; Space1.1&amp;nbsp;&amp;nbsp;&amp;nbsp; inherits&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp; Space1.2&amp;nbsp;&amp;nbsp;&amp;nbsp; inherits&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp; Space1.3&amp;nbsp;&amp;nbsp;&amp;nbsp; inherits but is also visible by NonEngineer1&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;My Problem is that NonEngineer is not able to navigate to Space 1.3 because he can not see Space1 at all.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;I could change permissions on Space1 by explicitly adding NonEngineer1 to the consumer List BUT:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I don't want NonEngineer1 to even see that there are other Spaces than his own Space1.3.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Reason NonEngineer1 is from a cooperating company and might be upset that he is not allowed to see all Space1 contents.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;So I need a role that explicitly hides Space1.1 and Space1.2 from NonEngineer1.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;I tried to find any restricting permission in permissionsDefinitions.xml but could not find one. They seem to only allow operation but not restrict them.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;A possible solution would be to add NonEngineer1 as Consumer to Space1, remove the "inherit" mark on Space1.1 and Space1.2 and add Engineer1 and 2 to Space1.1 and 1.2.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;But imagine that I have about 100 Space1.x folders. That would be a lot of work, be very unflexible and Groups would be useless at all.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Hope you can help me.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks in advance.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Wed, 09 Feb 2011 13:52:51 GMT</pubDate>
    <dc:creator>thedramatic</dc:creator>
    <dc:date>2011-02-09T13:52:51Z</dc:date>
    <item>
      <title>Is there a Restricting Permission?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/is-there-a-restricting-permission/m-p/258703#M211833</link>
      <description>Hi folks,is there a way to explicitly deny a user to see specific folders in a space.Group A: Engineer1 Engineer2User:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; NonEngineer1Space 1&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; accessable and visible by Group A&amp;nbsp; Space1.1&amp;nbsp;&amp;nbsp;&amp;nbsp; inherits&amp;nbsp; Space1.2&amp;nbsp;&amp;nbsp;&amp;nbsp; inherits&amp;nbsp; Space1.3&amp;nbsp;&amp;nbsp;&amp;nbsp; inherits but is also visible by NonEngineer1My Problem is</description>
      <pubDate>Wed, 09 Feb 2011 13:52:51 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/is-there-a-restricting-permission/m-p/258703#M211833</guid>
      <dc:creator>thedramatic</dc:creator>
      <dc:date>2011-02-09T13:52:51Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a Restricting Permission?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/is-there-a-restricting-permission/m-p/258704#M211834</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;bump&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 14 Feb 2011 15:42:13 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/is-there-a-restricting-permission/m-p/258704#M211834</guid>
      <dc:creator>thedramatic</dc:creator>
      <dc:date>2011-02-14T15:42:13Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a Restricting Permission?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/is-there-a-restricting-permission/m-p/258705#M211835</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;You can use deny (but not via the UI) but this would break navigation.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;You could expose them in another folder with secondary links to the files.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Permissions are inherited via the primary association.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;So if a user can not see a file it is not visible via the secondary links.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;You should be able to get a rule to make the secondary associations for you - you would have to write some script.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;A folder defined by query would help your use case but that is not yet supported.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Query would return what they can see regardless of navigation.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Andy&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 16 Feb 2011 19:38:35 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/is-there-a-restricting-permission/m-p/258705#M211835</guid>
      <dc:creator>andy</dc:creator>
      <dc:date>2011-02-16T19:38:35Z</dc:date>
    </item>
  </channel>
</rss>

