You are viewing limited content. For full access, please sign in.

Question

Question

access rights scope

asked on September 10, 2018

I understand it's possible to add the same trustee twice with different scopes and access rights.  Maybe that's the only way.

What scope should I use to give create documents rights within a folder?  "Immediate children only" and "Documents only" don't allow document creation.  "This folder, subfolders and documents" and "This folder and subfolders" do allow document creation but are too broad because I also need to grant delete entry and rename rights.  

Thanks!

0 0

Answer

SELECTED ANSWER
replied on September 11, 2018

Think of scope as where the right is on, so the "Documents Only" scope is on the documents inside a folder, not on the folder itself. This is important here because document creation is an action based on the folder you are trying to create the document on, not on the documents inside of that folder. The table here describes what all the possible scopes do: https://www.laserfiche.com/support/webhelp/Laserfiche/10/en-US/administration/#../Subsystems/LFAdmin/Content/Inheriting_Entry_Access_Rights.htm. In your case you want one that applies to folders so that would likely be "This folder and subfolders". 

So if you want to control the ability to create, rename, and delete documents, but not the folders (which it sounds like you are trying to do, not sure why you would need two scopes otherwise), you would set up create documents on "This folder and subfolders", and rename and delete on "Documents only". If you are doing something else, you probably don't need multiple scopes (but please clarify what you are trying to do if so, we can probably set it up). 

1 0
replied on September 25, 2023

Adding on to this old thread, because we have a similar situation.

 

The basic issue is one of scope.  You can limit deletion to "Documents Only" but this only applies to an individual folder.

 

But what if you want to grant "Delete document but not folders" to an entire folder tree?  I would submit that this is a more typical use case.  It would be really helpful to have a scope option like "Documents only in this folder and sub folders"

0 0

Replies

replied on September 11, 2018

So if you want to control the ability to create, rename, and delete documents, but not the folders

That is exactly my aim.  Allow freedom to create, manipulate, and delete documents, but protect the folder they reside in. 

document creation is an action based on the folder you are trying to create the document on, not on the documents inside of that folder.

Thanks for the clarification.  I haven't read your entry access rights link yet, but it sounds like there isn't a way to do it with a single scope.

0 0
replied on September 11, 2018

Correct, and that's because two of those are based on the rights on the documents themselves, while one is on the folder. Situations like this are why assigning two different entry access rights configurations for the same group but with different scopes is supported and built into the UI. 

1 0
You are not allowed to follow up in this post.

Sign in to reply to this post.