Hi,

If I set the following access rights on 'default server':

* members (grant read)


As expected, for 'default domain' I have the following inherited rights:

* members (grant read)


I then set the following local rights on 'default domain':

* members (deny read)


On Workspaces I then have the following inherited rights:

* members (grant read) (deny read)


Now (as expected) the policy on Workspaces works correctly in that the local rights on 'default domain' (members deny read) take precedence over the 'default server' (members grant read).

But would the UI be better to only display (members deny read) to make it clearer to end-users?

Regards,

Sean

--
Dr. Sean Radford, MBBS, MSc
http://www.tacola.com/
t: +44 (0) 8700 671 490
m: +44 (0) 7802 24 24 86

_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm
To unsubscribe, go to http://lists.nuxeo.com/mailman/options/ecm

Reply via email to