Hello,

if I have a tree like this and node A has the inheritable permission
/actions/view.

|
+-+ A             /actions/view
| |
| +-+ B           /actions/view (inherited)
| | |
| | +-+ C         /actions/view (inherited)
| | | |
| | | +- D        /actions/view (inherited)


Now I want to revoke this permission at B and C, but leave it at D.

|
+-+ A             /actions/view
| |
| +-+ B
| | |
| | +-+ C
| | | |
| | | +- D        /actions/view

At node B, I cannot revoke this permission, because it is inherited from A.
If I deny it, I will also deny the permissions for C and D respectively. I
don't want to revoke this permission at A, because new nodes inserted below
A wouldn't have this permission, which is not wishful. Is it intentional
that deny influences all nodes below?

Thank you for your help.

Danny =:-)

Reply via email to