Hello,

I have spent a couple of days working with user access rights in the
application we are building. And I think I understand how things work by
now, almost ... :-) A couple of questions remain, however...

The customer we work for wants the initial creator of a document to be the
only one who has the right to assign access rights to that document. And
that is impossible, it seems, given the way ACL work in Slide. The way I
want this to work is to first grant "read" and "write" to our user groups
(roles) on the collection where the file is stored. Second, I grant
"read-acl" and "write-acl2 to the user that created the document. Finally, I
deny "read-acl" and "write-acl" to our user groups. However, since the user
is part of one of the user groups, the user is also denied "read-acl" and
"write-acl". Now to my question, is there any way around this? I.e. can I
grant a user belonging to a group higher access rights than that group?

Another question in this area: Assume that we have a user A that is a member
of groups B and C. Group B has "read" and "write" rights on a file and group
C only has "read" rights. Will user A be able to write to that file? This is
not really part of the problem I need to solve, it just curiosity :-)

Best regards,
Pontus Strand

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to