company home –client 1 —-internal —-public –client2 —-internal —-public –releases
I have a user called John who works for client 1. I only want John to be able to see anything within the public space of the client1 space and anything in the releases space (since this is where we will make new releases available to all clients for download).
To set this up I have created a user group called 'client1' assigned John to that group and invited that group to the client1/public space as a consumer. I have also made the client1/public space the home space for John.
I have also create a user group called 'release access' assigned John to that group and invited the group to the releases space as a consumer.
When I log in as John I see the sidebar accordion has two areas My Home and My Alfresco. Within My Home John can see the spaces below client1/public but can't see the releases space even though he belongs to the 'release access' group which has been invited to that space.
I'm not using any special authentication and this isn't a guest user. However this user does not have permissions to see Company Home (I have removed the Everyone access and only internal users can see Company home). This user is however in a user group which has permissions to see the releases directory below company home.
So am I right in thinking that for a user to see a directory below company home they must also have rights to see company home itself ? You can't just start them at a lower level directory.
If the user hasn't got permissions to see the Company Home folder he won't be able to see directly anything under Company Home (i.e. releases).
You'll need the GROUP_EVERYONE set as consumer on Company HOme and remove the "inherit permissions" flag for every space directly under Company Home: client 1, client 2, release, …. Then you'll need to give each folder the corresponding permissions