Question

Security/access configuration with Read-only group

Laserfiche Administration

Updated August 19, 2014

asked on April 23, 2013 • Show version history

Greetings,

LF 9.0.1

We have an urgent need for some guidance with access rights when using Windows Groups.

The basic issue is that user A belongs to two groups.

Group_1 is the “All Laserfiche users” group. It has Browse & Read access.

Group_2 is the “Secure Scanners Group” that has all access rights.

The folder is inheriting rights for Group_1 from the parent, Groups _2 is not inherited but rather, assigned at the folder level.

The user is JHUNTER.

The user JHUNTER belongs to the windows group LASERFICHE STAFF which is marked as READ ONLY and has the SCAN feature right.

The user JHUNTER also belongs to the windows group LASERFICHE SCANNERS which is not marked READ ONLY and has the SCAN feature right. (as seen in the attached screenshot SCANNERS_Properties.jpg)

The user cannot scan into the Commission folder even though the Access rights allow the group LASERFICHE COMMISION SCANNERS full access.

The effective rights on the folder show the group LASERFICHE COMMISION SCANNERS has rights granted, but the effective rights for JHUNTER show they are not.

The user is not able to scan into the folder.

What am I doing wrong.

0 0

Answer

APPROVED ANSWER

replied on April 26, 2013 • Show version history

Your issue stems from the fact that you have marked the LASERFICHE STAFF group as read-only. Laserfiche security will always take the most restrictive properties and apply them to enforce a secure system. Depending on what it is you are trying to restrict users from doing, in this situation I might recommend just using privileges and access rights to manage the security of users instead of making the users themselves read-only. Using access rights it is possible to grant users ‘browse’ and ‘read’ access to areas of the repository.

0 0

Replies

replied on August 19, 2014

I am setting up a folder (called Background Chencks) to be used by outside personnel (citizens) to view and print documents that are placed in the folder. I have also created a generic account to be used by the people viewing documents in this folder. I have set up the folder with Browse and Read access only. When I tested the setup the account can view the documents but can not print them. I did not see a specific "right" for printing. What am I missing?

0 0

You are not allowed to follow up in this post.

Question

Question

Security/access configuration with Read-only group

Answer

Replies

Sign in to reply to this post.