I have 2 users with roles Collaborator.
The first user creates a file.
The second user checks out the file.
The first user can still undo the checkout, which is not desirable, how could I prevent that?
I tried to skip the rights of "owners", but it did not help:
<globalPermission permission="FullControl" authority="ROLE_ADMINISTRATOR"/>
<!– <globalPermission permission="FullControl" authority="ROLE_OWNER"/> –>
<globalPermission permission="Unlock" authority="ROLE_LOCK_OWNER"/>
<globalPermission permission="CheckIn" authority="ROLE_LOCK_OWNER"/>
<globalPermission permission="CancelCheckOut" authority="ROLE_LOCK_OWNER"/>