permission inheritance

avatar

Is it possible to create a sub folder with more permissions than a top level folder?

Suppose I have the following:

GroupAFolder
--TeamAFolder
GroupBFolder
--TeamBFolder

I have have two logins, one for Team A, one for Team B.

With no permissions set on GroupAFolder or GroupBFolder, I give full permissions on Team A folder to Team A login and full permission to Team B folder to team B login. This works as expected and the users can login and drill down to their folder.

The issue is the users in Team B can see the GroupAFolder (but no sub folders) and can create items under GroupAFolder. TeamBFolder users can also create items in the GroupBFolder which I would prefer they not be able to.

If I create a new group, GroupB, and assign read only to TeamB login, and then set GroupBFolder to have GroupB permissions, TeamB users can no longer create items in their TeamBFolder. On the plus side, it prevents TeamA from seeing the GroupB folder.

I hope that makes sense and hopefully there’s a way to allow access in the way I described it.

Thanks

All Comments (2)

avatar

i just found the "allow add entry in group" option which seems to solve my problem of creating items in the group folder. Seems it applies to admins as well so I would need to toggle this option when i need to create a new team folder.

If this is how this option is meant to be used, i can live with it since I won't be creating too many team folders on a daily basis.

As for hiding the other group folder, seems like that would solve my problem as well if I changed the group folder permissions from view to full (except someone could accidently delete everything then I suppose)

avatar

Hi

Folders unprotected by a security group are deemed public. Thats why users can create items under the GroupAFolder or GroupBFolder. Its really not recommended to have public groups in a team environment.

I dont understand exactly what you want to achieve. Please describe your requirements in details.

You can PM me if you'd like. I can even remote in on your desktop to help you set this up.

Maurice