You are viewing limited content. For full access, please sign in.

Question

Question

unable to allow full access to folder

asked on December 20, 2016 Show version history

I have a tricky situation here. I have an existing repository that has been setup by someone a while ago. Almost everyone uses windows auth and there are a bunch of groups set up too. They have user folders setup but for some reason I can give this person full access to their user folder. Here is the way I have given explicit allow to her.   

 

Here is what it looks like when I check her effective rights. 

http://screencast.com/t/cx7KcRJ6

 

I cant find any Deny anywhere that is overriding my allows. I have tried the same setup with other users with the same results. I also tried the HR managers profile and hers did not give me the same trouble. What could I cross reference to see why one persons profile acts the way I want and the other one does not? Thanks. 

 

0 0

Answer

SELECTED ANSWER
replied on December 20, 2016

A case was opened for this matter. A screenshot of the desktop client application with the user logged in showed that she was in fact read only.

The Windows user in question is a member of a Windows group that had been configured to be read only.

The plan moving forward is to remove the user from that read only Windows group.

1 0

Replies

replied on December 20, 2016

What shows up when you check the "Show inherited rights" box?

0 0
replied on December 20, 2016

0 0
replied on December 20, 2016 Show version history

Is the user getting denied access via the inherited rights from the "EVERYONE 6" group? Or maybe the user or the "EVERYONE 6" group is read-only?

0 0
replied on December 20, 2016

I dont thinks so but I also dont see where you can deny access via the group. 

How would you set up deny in a group? 

0 0
replied on December 20, 2016

and no, the everyone 6 group is not read only. 

0 0
replied on December 20, 2016

and for more context, this is the user account for my HR manager. I set her up the exact same way and the effective rights are good. 

0 0
replied on December 20, 2016

Is the user a member of the "EVERYONE 6" group? If so, then look at the actual access rights configured for "EVERYONE 6" on the RMCDocs\Users folder. Perhaps some access rights are being denied from there.

If that's not the issue, then confirm whether the user is read only or is a member of any other group that may be read only, since you've stated that "EVERYONE 6" is not read only.

0 0
replied on December 20, 2016

the user is not a member or the Everyone 6 group but she is a member of a group that is linked as a domain trustee. 

I'm not sure why it was setup this way. It's confusing to have a group linked to another group so i'm not sure why it was setup this way. I have looked for read only groups and I did not find any. 

0 0
replied on December 20, 2016

here is how the everyone 6 group is set on the user folder.

 

0 0
replied on December 20, 2016

again I'm finding no Denys anywhere, plus its confusing that when I try to give her full access she does gain "see annotations" and "see through redactions"

0 0
replied on December 20, 2016

I didn't see a response to this, but can you confirm that the user is not read only and is not a member of any group that is read only?

0 0
replied on December 20, 2016

yes, I can confirm that the user is not read only and not apart of any read only group.

0 0
replied on December 20, 2016

Please open a case with Laserfiche Support to troubleshoot the issue further.

0 0
SELECTED ANSWER
replied on December 20, 2016

A case was opened for this matter. A screenshot of the desktop client application with the user logged in showed that she was in fact read only.

The Windows user in question is a member of a Windows group that had been configured to be read only.

The plan moving forward is to remove the user from that read only Windows group.

1 0
replied on December 20, 2016

Yes Classic VAR error. So many groups in Admin console and also this issue being handed to me from someone else meant that I never myself looked at the client from the users computer. Thanks Alex

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.