Custom Role COnfig

[ajshaw]

Hello. I think i might be missing something.

I need to create a role where the user can cut/paste, but cannot delete or create documents. Is it possible to seperate cut/paste from delete/create ?
Or do i have to just do the check in the UI code, but in reality they still have create/delete permissions. (That would probably suffice in this instance)


I'd appreciate any comments. Thanks : )

[andy]

Hi

A user can do copy and paste if they have read access.

Cut and paste requires delete from the source and add on the destination.

These are all defined via the settings in public-services-security-context.xml and the configuration of the file folder service. You could add specific permissions for copy and move (that do not depend on create and delete) and assign these as required. The default is to use create/delete permissions to control copy and move. You could then add these "COPY" and "MOVE" permissions to roles. See the default permission model and wiki docs.

Regards

Andy