[opencms-dev] Who are "All others" in relation to ACL?

[Alexander Kandzior]

"All others" in OpenCms ACLs means all other users that do not have explicit
permissions set on that resource. 

 

Use case example: You have settings for "Guests" (no permissions) and group
"A" (full permissions) on a folder X. You also have multiple other groups
(say B-Z). If you set "All other" on the folder X then this will not apply
to "Guests" and "A", because these have explicit permissions set on the
folder, but for all other groups (B-Z). 

 

Kind Regards,

Alex.

-------------------

Alexander Kandzior

                                                              

Alkacon Software GmbH  - The OpenCms Experts                 

http://www.alkacon.com - http://www.opencms.org                  

 

 

From: opencms-dev-bounces at opencms.org
[mailto:opencms-dev-bounces at opencms.org] On Behalf Of Claus Priisholm
Sent: Tuesday, December 11, 2012 6:15 PM
To: The OpenCms mailing list
Subject: [opencms-dev] Who are "All others" in relation to ACL?

 

 

Is it a new kind of "Guests" or just a kind of short cut? I am on 8.5.

 

>From the UI: "Select to set permissions for users with no defined access
control entry"




I have a couple of groups in a non-root org-unit (say A and B), they have
access to a specific folder inside a parent folder (AFolder and BFolder)
where +r+v is added for A and B. They do not have a parent group. 

 

When I remove +r+v from the "All others" on the parent folder (overwrite
inherited, inherit to subfolders) then a user belonging to A-group  no
longer can see the AFolder. So it seems that a user - who is member of a
group - falls under the "All others" umbrella. Maybe that makes sense in
that (at least in one attempt) there was no mention of the A-group on the
parent-folder, so "all others" apply at that point in the folder hierarchy.

 

If the "All others" is removed from the parent folder then the A-group user
can see the AFolder... but also the BFolder (as expected).

 

If the "All others" is removed from the parent folder but is set on the
AFolder directly with +r+v removed as before, along side the added +r+v for
the A-group, then  the A-group user can no longer see the AFolder. 

 

-- 
Claus Priisholm

+45 48 22 46 46

cpr (you know what) codedroids.com

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20121212/1797d1cc/attachment.htm>