The customer has a user that has been assigned to a group that has full feature rights. The customer would like one user in the group not to be able to move folders. I thought by assigning all feature rights to that user minus the right to move folders would trump the move folder assigned to the group, but that does not seem to be the case. Am I incorrect?
From Introduction to security:
“When calculating whether a user should be able to perform a particular task, Laserfiche will take into account both the security settings applied to the user and the security settings applied to a group. If a user has been denied the ability to perform a function or access a document—whether that deny was set directly on the user, or was inherited from a group—they will not be able to perform that task, even if they have also been allowed it in another setting. In other words, deny trumps allow.”