<div dir="ltr"><div>I forgot to say those folders I need to restrict to some groups, are subfolders or sub-subfolders of main site folder. This is because they are used to make some menus and lists. Then, I need the permissions to the parents folder granted, and overwrite them with the restrictions over the special group folders.</div>
<div>I think I will have to make combined groups as Huy described, because I can do that without changing what I have already done.</div><div>A best approach may be making a public folder and a private folder in the root of the site, and somehow combining them in the menus and lists...</div>
<div><br></div><div>I really appreciate I got answers, and so quickly,</div><div> thank you very much!</div><div><br></div><div> Roberto</div><br><div class="gmail_quote">2008/9/26 Andy Savin <span dir="ltr"><<a href="mailto:A.D.Savin@bath.ac.uk">A.D.Savin@bath.ac.uk</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><br>
Hi,<br>
<br>
We have a similar setup here. You need to simply untick the permission you don't want people to have rather than using denied.<br>
<br>
So for example all folders have the following ticked for the All others group:<br>
<br>
read allowed<br>
overwrite inherrited<br>
inherit on subfolders<br>
<br>
This prevents anyone from seeing and editing those folders.<br>
<br>
Then for each folder a department group is given the following:<br>
<br>
read allowed<br>
write allowed<br>
view allowed<br>
overwrite inherrited<br>
inherit on subfolders<br>
<br>
And also a second smaller group of editors (who are also contained in the first group):<br>
<br>
responsible<br>
publish directly allowed<br>
read allowed<br>
write allowed<br>
view allowed<br>
overwrite inherrited<br>
inherit on subfolders<br>
<br>
Other than those mentioned everything else is left unticked.<br>
<br>
This all works as intended.<br>
<br>
Regards,<br>
<br>
Andy<br>
<br>
-- <br>
----------------------------<br>
WEB SYSTEMS DEVELOPER<br>
Web Services<br>
University of Bath<br>
Tel: 01225 38 6275<br>
----------------------------<br>
<br>
On Fri, 26 Sep 2008, <a href="mailto:HuyTran@c-mg.net" target="_blank">HuyTran@c-mg.net</a> wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
From: <a href="mailto:HuyTran@c-mg.net" target="_blank">HuyTran@c-mg.net</a><br>
To: 'The OpenCms mailing list' <<a href="mailto:opencms-dev@opencms.org" target="_blank">opencms-dev@opencms.org</a>><br>
Date: Fri, 26 Sep 2008 12:05:53 +0700<br>
Subject: Re: [opencms-dev] Permissions model<br>
Reply-To: The OpenCms mailing list <<a href="mailto:opencms-dev@opencms.org" target="_blank">opencms-dev@opencms.org</a>><br>
X-Spam-Score: 0.5 (/)<div><div></div><div class="Wj3C7c"><br>
<br>
Hi,<br>
<br>
I faced the same problems before. I had to create the combined group such as<br>
Arts_Technology and add the user to that group. This is easier for me as the<br>
number of combinations is not very large. The reason is CMS treat the<br>
permissions in exclusive way, I mean if a user is both granted and denied to<br>
access a folder, he will not be able to access that folder.<br>
<br>
<br>
<br>
I'm not sure if your users will acess the workplace or in the sites. If it<br>
is in the site, you can create some JSP code and put it to the templates of<br>
the pages to check the permissions of user to that page. The approach may be<br>
like this.<br>
<br>
<br>
<br>
1. Get the resouce path of the page<br>
<br>
2. Get the folder the resouce is in<br>
<br>
3. Find the group correspond the folder<br>
<br>
4. Check if user is in the group. If Not, redirect to error page.<br>
<br>
<br>
<br>
So you only need to add user to the group and get rid of the permission<br>
setting stuff in the folders. I think this is not very difficult to do. You<br>
may need to look at CmsObject class.<br>
<br>
<br>
<br>
Regards,<br>
<br>
<br>
<br>
Huy<br>
<br>
_____<br>
<br>
From: <a href="mailto:opencms-dev-bounces@opencms.org" target="_blank">opencms-dev-bounces@opencms.org</a><br>
[mailto:<a href="mailto:opencms-dev-bounces@opencms.org" target="_blank">opencms-dev-bounces@opencms.org</a>] On Behalf Of Roberto Fernández<br>
Sent: Friday, September 26, 2008 12:29 AM<br>
To: <a href="mailto:opencms-dev@opencms.org" target="_blank">opencms-dev@opencms.org</a><br>
Subject: [opencms-dev] Permissions model<br>
<br>
<br>
<br>
I am trying to find a way to easily add permission to folders. If I have<br>
many groups, each one with permission over the folder of the group, I want<br>
to be able to create users with more than one group, and that they have<br>
access to the corresponding folders.<br>
<br>
<br>
<br>
For example, I have teachers of many departments; every department has a<br>
folder, and a group, and that group has permissions over the corresponding<br>
folder, and denied permission to other department folders.<br>
<br>
If I have a teacher that work in both departments "Arts" and "Technology",<br>
if I create his user, and add both groups, hi will not have access to any of<br>
the folders.<br>
<br>
<br>
<br>
This happens because the most restrictive rule is applied, so as the user<br>
belongs to "Arts" group, the permission to technology folder will be denied<br>
for him, and as hi belongs to "Technology" group, the permission to arts<br>
folder will be denied as well.<br>
<br>
<br>
<br>
So, my question is, ¿is there any way to perform what I need? Id est, been<br>
able to easily "add" permissions to an user, preferably assigning him<br>
groups.<br>
<br>
</div></div></blockquote>
<br><br>
_______________________________________________<br>
This mail is sent to you from the opencms-dev mailing list<br>
To change your list options, or to unsubscribe from the list, please visit<br>
<a href="http://lists.opencms.org/mailman/listinfo/opencms-dev" target="_blank">http://lists.opencms.org/mailman/listinfo/opencms-dev</a><br></blockquote></div><br></div>