I was recently asked if a supervisor could have access to select employee files within the HR department folder. Is there a way to dynamically allow access for that supervisor to only the employees that fall under that supervisor? We have some external tables that show the reporting structure. I was thinking of creating a folder specifically for that supervisor, and somehow moving/copying their employees' files to that folder dynamically. Any ideas?
Question
Question
Grant a user access to select subfolders within a parent folder
Replies
There isn't a way for security to directly reference an external data source, but you could update security based on data like a org chart. You could use Workflow or program with the SDK directly to update the Entry Access Rights of the folders in question.
If I'm correct....couldn't you create a specific group in the LF Admin Console with a name like "HR Management" or "HR Admin" and give the entire group specific access rights to the employee folders as a whole that aren't inherited from the parent folder?
For example you might have a group called "Everyone" that has everyone in your org in it with access to the parent folder, but you could make it so that group only has access to a specific set of subfolder within that parent folder.
Then you could make a group called "HR management" "HR Admin" etc. That has access to another set of subfolders that aren't inherited so that way ONLY that HR group has access to read/write on those folders.
Not sure how you have it setup, but we set everything up in Laserfiche based on groups and every group has different access rights to certain folders and functions. Just something to maybe try or consider.
The only issue we have with that is managing the list of folders the supervisor has access to. Currently all employees have a subfolder under an HR parent folder with all the different documents within. We ideally want it to be automated so that anytime an employee is added to the specific department it would be accessible to the appropriate supervisor.
Ahhh okay now I understand
The other thing you could do is give the supervisor shortcuts to the employee folders they need access too.