[opencms-dev] Who are "All others" in relation to ACL?

[Claus Priisholm]

Is it a new kind of "Guests" or just a kind of short cut? I am on 8.5.

>From the UI: "Select to set permissions for users with no defined access
control entry"

I have a couple of groups in a non-root org-unit (say A and B), they have
access to a specific folder inside a parent folder (AFolder and BFolder)
where +r+v is added for A and B. They do not have a parent group.

When I remove +r+v from the "All others" on the parent folder (overwrite
inherited, inherit to subfolders) then a user belonging to A-group  no
longer can see the AFolder. So it seems that a user - who is member of a
group - falls under the "All others" umbrella. Maybe that makes sense in
that (at least in one attempt) there was no mention of the A-group on the
parent-folder, so "all others" apply at that point in the folder hierarchy.

If the "All others" is removed from the parent folder then the A-group user
can see the AFolder... but also the BFolder (as expected).

If the "All others" is removed from the parent folder but is set on the
AFolder directly with +r+v removed as before, along side the added +r+v for
the A-group, then  the A-group user can no longer see the AFolder.

-- 
Claus Priisholm
+45 48 22 46 46
cpr (you know what) codedroids.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20121211/167134ec/attachment.htm>