Questions on permissions

[limarin]

Hi,

I have questions on permissions:

The owner of a node (by default the creator) has all permissions for the node, is possible change?

I explain…

I need users who could create documents but only to could read them, not modify, not edit…. If I I have to create a new user role in permissionDefinitions.xml, that permissions I have to assign?

Also, users who could create spaces with the permissions of the space father, no whit all permissions. Is possible to extend permissions?

Example:

I have a similar template to spaces.xml and I create a space "mySpace" whit a access user: authority="userX" and permission="permissionY".

    <cm:folder view:childName="${spaces.company_home.childname}">
        <view:acl view:inherit="false">
            <view:ace view:access="ALLOWED">
                <view:authority>GROUP_EVERYONE</view:authority>
                <view:permission>Consumer</view:permission>
            </view:ace>
        </view:acl>
        <app:uifacets />
        <cm:name>${spaces.company_home.name}</cm:name>
        <app:icon>space-icon-default</app:icon>
        <cm:title>${spaces.company_home.name}</cm:title>
        <cm:description>${spaces.company_home.description}</cm:description>
        <cm:contains>
        
            ……….
            
            <cm:folder view:childName="${spaces.mySpace.childname}">
                <view:acl view:inherit="false">
                    <view:ace view:access="ALLOWED">
                        <view:authority>userX</view:authority>
                        <view:permission>permissionY</view:permission>
                    </view:ace>
                </view:acl>
                <app:uifacets />
                <cm:name>${spaces.services.mySpace.name}</cm:name>
                <app:icon>space-icon-default</app:icon>
                <cm:title>${spaces.services.mySpace.name}</cm:title>
                <cm:description>${spaces.services.mySpace.description}</cm:description>
            </cm:folder>            
        </cm:contains>
    </cm:folder>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

If the user creates a new space, is possible to assign the permissions of the space "mySpace" to the new space and not all the permissions (to the being the user the owner) ???

Thanks

[andy]

Hi

It sounds like you do not want the global permissions for the node owner.
This can be removed from the config (or you could just give the onwer read permission)

Regards

Andy