Thanks Daniel! Ordering the access rights properly worked for me. /Pontus
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 15, 2004 11:32 AM To: 'Slide Users Mailing List' Subject: AW: ACL questions As far as I can remember the ordering of the ACL is very important for the resulting permissions. The first entry that matches the user/required permission will indicate if the user if allowed to perform the required action. If this is true it would be possible to achieve what you had in mind by simply ordering the acls in the right way. Cheers, Daniel > -----Urspr�ngliche Nachricht----- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Im Auftrag von Pontus Strand > Gesendet: Mittwoch, 15. Dezember 2004 10:28 > An: Slide Users Mailing List (E-mail) > Betreff: ACL questions > > Hello, > > I have spent a couple of days working with user access rights in the > application we are building. And I think I understand how things work by > now, almost ... :-) A couple of questions remain, however... > > The customer we work for wants the initial creator of a document to be the > only one who has the right to assign access rights to that document. And > that is impossible, it seems, given the way ACL work in Slide. The way I > want this to work is to first grant "read" and "write" to our user groups > (roles) on the collection where the file is stored. Second, I grant > "read-acl" and "write-acl2 to the user that created the document. Finally, > I > deny "read-acl" and "write-acl" to our user groups. However, since the > user > is part of one of the user groups, the user is also denied "read-acl" and > "write-acl". Now to my question, is there any way around this? I.e. can I > grant a user belonging to a group higher access rights than that group? > > Another question in this area: Assume that we have a user A that is a > member > of groups B and C. Group B has "read" and "write" rights on a file and > group > C only has "read" rights. Will user A be able to write to that file? This > is > not really part of the problem I need to solve, it just curiosity :-) > > Best regards, > Pontus Strand > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
