topic Re: ReST API call for blocking inherited rights in Nuxeo Forum

ReST API call for blocking inherited rights

Anurag_Kumar — Wed, 21 Oct 2015 09:26:32 GMT

Scenario is :

I have created two folders at path /ABC/DEF, those are /ABC/DEF/Folder1 and /ABC/DEF/Folder2.

I have created two users User1 and User2 with tenant ID ABC.

I want to assign permission in such a way that User1 can see only Folder1 and can manage everything at Folder1 and User2 can see only Folder2 and can manage everything at Folder2.

For the above i gave User1 read permission to folder ABC and DEF and Manage Everything Permission at Folder1, but because of Read permission at parent folder, User1 can see Folder2 also i.e. jsut view, which i dont want to happen.

Result should be like : User1 can see only Folder1 and User2 can see only Folder2 under path /ABC/DEF.

Can we block inherited rights using some REST API calls at a folder?

Re: ReST API call for blocking inherited rights

Anurag_Kumar — Thu, 22 Oct 2015 12:58:59 GMT

If anyone can help here about this ?

Re: ReST API call for blocking inherited rights

pibou_Bouvret — Sun, 25 Oct 2015 07:53:38 GMT

Blocking inheritance is translated in ACLs as principal="Everyone" permission="Everything" grant="false"

Re: ReST API call for blocking inherited rights

Anurag_Kumar — Mon, 26 Oct 2015 05:00:18 GMT

Can you please elaborate programmatically ?

Re: ReST API call for blocking inherited rights

pibou_Bouvret — Mon, 26 Oct 2015 06:22:53 GMT

check http

Re: ReST API call for blocking inherited rights

Anurag_Kumar — Wed, 04 Nov 2015 09:57:08 GMT

This doesn't solve my purpose.

Re: ReST API call for blocking inherited rights

pibou_Bouvret — Wed, 04 Nov 2015 09:59:29 GMT

Maybe could you dump ACLs of the documentts before and after the operation

Re: ReST API call for blocking inherited rights

Anurag_Kumar — Wed, 04 Nov 2015 10:15:16 GMT

Here is how i am creating folder

Re: ReST API call for blocking inherited rights

pibou_Bouvret — Wed, 04 Nov 2015 10:23:49 GMT

In the UI, go to Document, export button, export to XML

Re: ReST API call for blocking inherited rights

Anurag_Kumar — Wed, 04 Nov 2015 13:07:02 GMT

ok. i got this

Re: ReST API call for blocking inherited rights

pibou_Bouvret — Wed, 04 Nov 2015 13:19:56 GMT

Not quite readble, should be something like that

Re: ReST API call for blocking inherited rights

Anurag_Kumar — Wed, 04 Nov 2015 13:28:21 GMT

please check the attached screen.

Re: ReST API call for blocking inherited rights

Anurag_Kumar — Wed, 04 Nov 2015 13:29:00 GMT

have attached screen below.

Re: ReST API call for blocking inherited rights

pibou_Bouvret — Wed, 04 Nov 2015 13:39:52 GMT

looks like an html view of youx XML. Check the source of this page

Re: ReST API call for blocking inherited rights

Anurag_Kumar — Wed, 04 Nov 2015 13:41:08 GMT

Re: ReST API call for blocking inherited rights

Anurag_Kumar — Wed, 04 Nov 2015 13:42:28 GMT

i got that source. what next shall i do ?

Re: ReST API call for blocking inherited rights

pibou_Bouvret — Wed, 04 Nov 2015 13:48:38 GMT

Seems there is a problem with the "<access-control>" part