Block permissions inheritance programatically

[bledii_]

Hello,

is it possible to block permission inheritance via API?

When we try by resetting the ACP it seems not to work, and still permissions are inherited.

Thank you

EDIT: my use case is the following:

i want to create a document (folder) inside a tree of other folders, but want only the creator and users from the admin group to have access on it

[bruce_Grant · Accepted solution]

Don't know about the API, but you could create a listener for various document creation events (DOCUMENT_CREATED, DOCUMENT_CREATED_BY_COPY, DOCUMENT_DUPLICATED, etc.) and then remove inheritance and set default ACL.

Something like...

DocumentRef docRef = docModel.getRef();
ACP acp = this.session.getACP(docRef);
						
// delete existing 'local' ACL 
acp.removeACL(ACL.LOCAL_ACL);

// block inheritance
acp.getOrCreateACL().add(new ACE(SecurityConstants.EVERYONE, SecurityConstants.EVERYTHING, false));

// and then create the local ACL entries you do want
ACL acl = acp.getOrCreateACL(ACL.LOCAL_ACL);
... and then create desired ACEs ...
acl.add(new ACE("testgroup","Read", true));
acp.addACL(acl);
this.session.setACP(docRef, acp, true);

[bledii_]

hello Bruce

[bruce_Grant]

I added lines to above example to create ACE and then save updated ACL to doc - is this what you tried?

[bledii_]

hello bruce, thanks for the info,the main difference i can find is the override=true in setACP, will try that and get back to you with the result, thanks

[bledii_]

hello bruce, it doesn't seem to work, unless we are doing something wrong.

[bruce_Grant]

The only other thing I can think is that I have this code running in a class that extends UnrestrictedSessionRunner so it has fully trusted status

[bledii_]

bruce, i am going to accept your answer as it pointed me in the right direction, thank you

[Anurag_Kumar]

Hey Bruce,

[vieville_]

Hello,