Folder,SubFolder Rights and Inheritance Problem-[CLOSED]

[system]

Hello.
I have a Top level folder called Document with thefpollowing access:
Everyone: No Access
There is a subFolder “A” which has thefollowing rights:
Everyone: No Access
We have created a group "TestGroup1"which has Full Control onthe subFolder A.
There is a subFolder "B which has thefollowing rights:
Everyone: No Access

Question: If I login as a user belonging to TestGroup1, I cannot see the Top level folder called Document, till I change the access to EveryOne on Document folder to “View”. This results in user seeing all the subfolders under Document while he just has to see subFolder “A”. We hadto manually turn off access to subFolder “B” to the TestGroup1. Is it possible to turn off access at the Top level folder and provide access only to a particular subFolder without having to manually turn off all the other subFolders ?
Any help would be appreciated.
Thanks

---

rbanavar (BOB member since 2005-01-13)

[system]

Go through the BO XI Administrators Guide and read the chapters on Open and Closed Security models (around page 324).

The closed system with increasing rights is mostly recommended and followed.

click here for more discussions on this

120×120 10.4 KB

Hi all, We are in the early stages of creating Security for our new XIR2 migration from 6.5. The current proposed model is based on the explicit ‘Deny’ property . Effectively, everyone has access to all areas and for each area we want to restrict we create a ‘ABC - Deny’ group and add each user we don’t want to have access to that group. I have a feeling this may not be the right way to go, and thinking it should be the reverse, ie. add users to the group to allow access. How have others str…

120×120 10.4 KB

Hi As an exerienced v5 user/administrator, I find myself attempting to set up BOXI (R2) security for the first time. (I have been on the BOXI Admin course and, yes, I am aware that I should try to forget everything I learned about the old Supervisor). Thankfully, this is on a “sandbox” system at this stage. Anyway, I am trying to set up an “open system of decreasing rights”, with various groups having various differing access levels, and a number of subfolders under the “public folders” fo…

Cheers

---

haider (BOB member since 2005-07-18)

[system]

Seems like InfoView does not favor the Closed rights method of security design. so, if access to a high level folder is denied, then even if access to a subfolder is granted, the user will not be able to view the subfolder.
We will design a workaround for this.
Thanks for the help!

---

rbanavar (BOB member since 2005-01-13)

[system]

The user has to have rights to atleast view at every level in the tree. this is why you don’t store documents in the navigation folders. The search can find the docs they have access to.

---

maverick976 (BOB member since 2004-07-06)

[SebastienGoiffon]

Hi,

The main point is think like Windows security. Folders are like set of doors. You need to have to open all parent doors for a given subdoor.

Regards

[system]

@maverick976

…The search can find the docs they have access to.

Which is unacceptable for customers as it involves additional steps to get to the document one needs.

I wish that I could assign “Not specify” to the EVERYONE Group for the top folder “My Project”, and grant “View on Demand” rights on subfolder “My Project | Finances” for the user group “Finances” and the user group Finances would be able to navigate to their folder using the folder structure in Infoview. In other words: They would see the top folder “My Project” and the only content within that folder would be the sub folder “My Project | Finances” with all the reports in that subfolder.

---

Andreas (BOB member since 2002-06-20)