AW: [opencms-dev] OpenCms6b1: problems with ACL

[Carsten Weinholz]

Hi,

- this is not a bug: you cannot overwrite denials on a resource tree,
overwrite works (intentionally) only for allowed permissions. 

For this reason, you must revoke the allowed permissions for group1 on
folder2 by creating a new access control entry with "overwrite inherited"
checked only (no permissions granted) - or you must not inherit the
permissions of group1 at folder1, and add another access control entry for
group2 at folder2.

Regards,
Carsten

Carsten Weinholz
Alkacon Software - The OpenCms Experts
http://www.alkacon.com

-----Ursprüngliche Nachricht-----
Von: opencms-dev-bounces at opencms.org
[mailto:opencms-dev-bounces at opencms.org] Im Auftrag von Stephan Hartmann
Gesendet: Mittwoch, 23. Februar 2005 13:01
An: opencms-dev at opencms.org
Betreff: [opencms-dev] OpenCms6b1: problems with ACL


Hi developers,

i have some problems with acl and access rights.
I have a folder "folder1" which contains a subfolder "folder2". Additionally
i have new groups: "group1" which is a subgroup of Users and "group2",
"group3", ... which are all subgroups of group1. I want to achieve that only
group2 has write access to folder2, but not the other subgroups of group1.
For folder1 i added a new acl entry for group "group1". In this entry i deny
write access to folder1 for group1 with "overwrite inherited" and "inherit
on subfolders" checked. This denies write acces to folder1 and its
subfolders for group1 and all its subgroups. For folder2 i added a new acl
entry for "group2". In this entry i grant all rights to this group2 with
"overwrite inherited" and "inherit on subfolders" checked. I would now
expect that members of group2 can write to folder2 but they can't. Is it a
bug?

Regards,
Stephan




_______________________________________________
This mail is send to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please visit
http://mail.opencms.org/mailman/listinfo/opencms-dev