Hi,

On 3 août 07, at 10:51, Pascal Vuylsteker wrote:
Take a shared folder (this is one of the interest of Nuxeo, isn't it ?)
Two users with some writing right ... on the folder
The first one put a file in the folder
The second user delete this file
The first one sees 6 months of his work just definitely gone and then
kill the second user !

How do you deal with this issue if you don't manage access rights on a
by file basis, but only by folder basis.

Precision : you are dealing with non unix geek users, so you'd better
come up with a concept that is understandable.

My initial suggestion (as seen previously) is the uses of a Trash Bin...
Any other idea ?
You could implement it using 3 different approaches in Nuxeo EP:

1. Trash feature: replace the hard delete feature by a move into a trashcan (personal, per workspace or global).

2. Soft delete: define and use a lifecycle state "deleted" applied to document instead of hard deleting them. Then handle the state properly so that document are not shown default in document lists. You could also add a scheduled job that would hard remove a "deleted" document if it has been "deleted" for 30 days, for example (to prune the system).

3. Permission restriction: restrict deletion to Workspace Manager or only grand the "Delete" permission to a specific set of users. You also could only allow a user to delete its own document (this would require to implement the notion of Owner for a document).

After having thought a bit of this issue, I think my preference is for the number 2.


Thanks,

EB.

--
Éric Barroca - Ex. VP of Operations - +33 6 21 74 77 64
www.nuxeo.com - Nuxeo: Open Source ECM - www.nuxeo.org
Nuxeo EP 5: extensible, Java EE and standards based ECM Platform !


_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm

Reply via email to