In the case of multiple roles, "Allow" permission has highest priority over "Deny" permission. This model applies only to permission levels not for the role levels. Hence "everyone" role doesn't have higher priority over other roles. For an instance, if you have set read deny permission to everyone role for a particular resource and read allow permission to "ttt_role" for the same resource. Then the read allow permission has highest priority over read deny permission of everyone role.
Thanks, Krishantha. 2010/9/2 dzh045 <[email protected]> > Hi, > I have added a new user named "ttt" and assigned a new role > named "ttt_role" to it . I saw that the user "ttt" having two > roles "ttt_role" and the defaulted role "everyone" . Then I set > permissions to that role "ttt_role" . But the permisssions (no matter > 'Deny' permissions or 'Allow' permissions ) set to the role > "everyone" have higher priority over the role "ttt_role" . > How to validate the permissions set to the new role > "ttt_role" ? > Thanks. > > At 2010-09-02 13:01:24，"Krishantha Samaraweera" <[email protected]> > wrote: > > Hi, > > User based permission model is deprecated feature. Only role based > permission model is allowed. Therefore you have to assign users to a role > and set permission to that role. > > Thanks, > Krishantha. > > 2010/9/2 dzh045 <[email protected]> > >> Hi: >> In the WSO2 Governance Registry ,I just find the >> permission's screen, used to assign permissions to different >> roles. So how can I assign some permisioms to individual >> users ? >> >> >> Thanks! >> >> >> ------------------------------ >> 您想拥有和网易免费邮箱一样强大的软件吗？ <http://qiye.163.com/?163> >> _______________________________________________ >> Carbon-dev mailing list >> [email protected] >> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev >> >> > > > ------------------------------ > 您想拥有和网易免费邮箱一样强大的软件吗？ <http://qiye.163.com/?163> > _______________________________________________ > Carbon-dev mailing list > [email protected] > https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev > >
_______________________________________________ Carbon-dev mailing list [email protected] https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
