Hello, I have a doubt about the grants to user addToFolder, removeFromFolder when there more than one user related to the documents.
I have one application space (spaceA) which is owner by one user (userA). I have the same for user B (spaceB, userB). userB can read spaceA. I don't want to copy the docmuments twice but I want they to be accesible by the two spaces.
Example:
1- The application create a document using userA in spaceA called doc1.
2- I excute doc1.addToFolder(spaceB) from userB.
3- I can access to doc1 thought spaceA and spaceB. This is good.
4- I want to remove doc1 from spaceB using userB becuse I just don't want any reference to the document in this space, but I want to maintain it in spaceA (where it was originally created) executing doc1.removeFromFolder(spaceB). ERROR!. I can't to remove it. userB must have Read/Write permission on spaceA to removeFromFolder(spaceB).
I don't know why I must have read/write permission on spaceA to remove something from spaceB. Is this correct?
It could be a security hole if I don't want that userB modify any document from spaceA.
What can I do?
Thanks.
