[opencms-dev] access rights messed ?! - help needed !

[Thomas Schmidt]

Hello,

simplifying the question:

in case i have all permissions set to „allowed“ (=e.g. +r+w+v+c+d ) for a folder and for a group of users which explicitly allows direct publishing (= +d) - and the users have roles "Category editor", „Editor", "Element author“  - is that not enough to publish ?

In my case users can’t publish from that folder even when having role & permission as described in line above. Is there anything else what can prevent publish rights ?

Thanks
BR
ThomasS




> Am 18.09.2016 um 21:54 schrieb Thomas Schmidt <t.schmidt at md-network.de>:
> 
> Hello,
> 
> i have seperated a site into sections by using subsitemap with local content to give more granular permissions. Therefore i reduced permissions for group „Users“ only to „read“ and i created subsitemap where a dedicated user group has full permissions (eg. for subsitemap „A“ group „Users“ can only read, group „Usergroup-A“ has full permissions, Administrators have full permissions, for all this permissions to one subsitemap it is additionally set to over write settings from higher folders and to inherit rights to sub folders).
> 
> When I edit now a XML (e.g. text section) element as normal user, member of the group which has full access to the subsitemap , and try to publish - it is forbidden (e.g. user „Member-Of-Usergroup-A“  can edit an element of subsitemap „A“ but not publish). Checking the rights (from Explorer) it tells me that the group ( „Usergroup-A“ ) has full access _including_ publishing. 
> 
> I’m lost - especially it seem to work few week ago … 
> 
> I tried to reset all permissions to the folder and build permissions up from scratch - no change. If i check directly permissions of the XML file i edit as nomal user („Member-Of-Usergroup-A“ where group „Usergroup-A“ has full permission to the folder (inclusive override parent permissions and inherit to child folders)) i see even that the Group should have publishing rights - but still the user can’t publish. I gave even the user directly to the XML file full rights - still he cannot publish. 
> 
> The user is in role "Category editor", „Editor", "Element author“ - anything i missed here ?
> 
> 
> I’m lost - any advises welcome - thanks a lot !
> 
> 
> BR
> ThomasS