We have a need to grant a user group a space, and then, disallow a number of users that are part of that group. Is there a way to invite group TEST as Collaborator to access the space DEVTEST, and then revoke user SMITH from viewing the contents of space DEVTEST? That is, without removing the user SMITH from the TEST group.
If your requirement is that you can have only one group, alfresco does support the concept of subgroup.
Create a group called TEST Create a subgroup under TEST called TESTSUB. Invite TESTSUB as Collaborator to a space. Remove GROUP_EVERYONE from the list of groups with consumer permission. uncheck "Inherit Parent Space Permissions"
This will allow TESTSUB group members to act as collaborators and members right under TEST with no permission.
You could also set any other permission for the TEST group.
If this is not an option then a significant customization may be needed.
Ok… so if I have the main group TEST, then I would need to create one or more subgroups for restricting permission in lower folders. So, you don't know of a negitive permission, grant everyone but one user. We had a custom app that would allow this type of function.