No, I think this is a misunderstanding. If you ask the security layer if a certain user is allowed to write and it has both read permission from one group and write permission from another group it should be granted write permission.
Oliver On Thu, 13 Jan 2005 09:21:25 -0500, Nick Longinow <[EMAIL PROTECTED]> wrote: > Thanks all for replies. > > This basically means that if a principal has read access in one group and > read-write in another, then if the read group comes first, then when a > webdav request is made to edit the document, the resource will be streamed > to the user in read-only mode. Not desirable in some circumstances... > Anyhow, at least I know now how to proceed. thanks again > Nick > > -----Original Message----- > From: Oliver Zeigermann [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 12, 2005 2:09 PM > To: Slide Users Mailing List > Subject: Re: Question - is ACL negotiation unchangeable w/ competing rights > ? > > I read the spec at > > http://www.greenbytes.de/tech/webdav/rfc3744.html#acl.evaluation > > such that the order is important and not strictness. Slide code says the > same. > > Oliver > > On Wed, 12 Jan 2005 13:15:16 -0500, Nick Longinow > <[EMAIL PROTECTED]> wrote: > > Hi > > If a resource (document) in Slide has an ACL with multiple entries for the > > same principal, the spec (as I recall it) says that the lesser permission > is > > applied to requests. ie, if user has read-only access as a member of one > > group, and read-write as a member of another group, both of which are > named > > in the resource's ACL, then the user is given only the lesser (read-only). > > > > Is there a way to modify this behaviour, ie, such that either the first or > > last permission is applied ? Ideas ? > > Nick > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
