Question

Implementing Template and Field Security?

Security

Updated April 11, 2014

asked on April 10, 2014

Hello Everyone

I have the following setup for my client and I am running into issues with my template security:

We have created two different groups:

Group 1 has read and browse access to certain folders

Group 2 has full access to certain folders.

Group 1 has read access to all templates and fields

Group 2 has full access to some tempalates

Fields are shared between multiple templates and Group 2 has full access to fields

If the users are only part of Group 1 they only have read access to document with view only image of the assigned template and fields (which is correct)

If the users are only part of Grop 2 they have a full access to the document and are able to drop down template list and select the templates they have access to and change it (The list only shows their assigned templates) (Which is correct)

Now Some users are included in both Group 1 and Group 2. With this combination the users are able to see more templates in drop down list when they are in docuemnts that have full right to. We only need Group 2 to see have full access to templates that are assigned to.

Is there a way to over come this issue?

Thanks

0 0

Replies

replied on April 11, 2014

Permissions are going to be shared across groups, so if it's simply that Group 1 has some templates and Group 2 has all, then a member in both will get all. If you want to ensure that some users do not have rights to see all templates while keeping them in Group 2, you can explicitly deny them template rights. That will take precedence over the allows when merged.

For example, you could explicitly deny Group 1 rights to the templates you know you don't want them to see. Then if a user is in both Group 1 and Group 2, they'll have the full rights on the folders, but they will only be able to see the non-deny'd templates. A user in Group 2 only would still be able to see all templates.

1 0

replied on April 11, 2014

In our case we need to have group 1 to have a read access to all template and some document. Group one has view only access and should be able to see the content of the template on the document that tempate assigned to.

That mean, I can not restrict them to view the template. Deny read access hides the template from Group 1 whom should have access to all template (read and browse only).

0 0

replied on April 11, 2014

Oh I must have misread the question then - I thought the issue was that Group 1 was seeing templates they should be able to, but it looks like the issue is Group 2 is seeing templates they shouldn't be able to. Well, does the opposite approach work then? Deny Group 2 the ability to view the additional templates?

0 0

replied on April 11, 2014

I am sorrey if i am not discriptive enough.....

We do want both groups to see all template (view only if its assigned to the document).

Group 2 assigns templates from drop down list and edits the fields but they should not see all templates on the drop down list.

When user from Group 2 gets included in Group 1 than Group 2 see all templates in drop down list that can be assigned.

0 0

You are not allowed to follow up in this post.

Question

Question

Implementing Template and Field Security?

Replies

Sign in to reply to this post.