Local Deny permission

[koxon_]

Hi,

I would like to change the local rights of a Folder in my domain. I need to deny read access to the group "Group for organizations: FFBS" (see screenshot) which has global read access on the domain.

As per this documentation: Nuxeo Doc

I should see two dropdowns to add new security rules:

• Action
• Permission

As you see below, I only see "Permission" which grants access but doesn't deny it.

Am I missing something?

Thank you

[koxon_]

Could this be because I created this folder using the "structure template" ?

[koxon_]

Found it. It was actually in the doc but I missed it. http://doc.nuxeo.com/display/USERDOC/Managing+Access+Rights

In a default configuration, it is not possible to deny access rights. It can however be enabled by a system administrator, using the nuxeo.security.allowNegativeACL parameter in the nuxeo.conf file.

nuxeo.security.allowNegativeACL=true