Any chances of this being added as future ability (for both rights & tags) in an upcoming version?  I am working more and more with dynamic environments where we are assigning 1 of 30 AD groups to a document depending on the type.  Then if the user changes the type I am having to programatically remove all 30 permissions just in case they were assigned prior to assigning the new AD group's permission.  Then if they add a 31st AD group I have to update workflow for another removal.

Hopefully Laserfiche will add the ability to just remove all security (and remove all security tags) to future versions of those activities.  I appreciate the help.

Any word on this being available in future versions of Workflow.  In doing dynamic security where we assign rights to a document to a specific person, it is impossible to cycle through all people who might have had rights when trying to remove permissions.  In order to continue to do Cumulative Folders for Student Records where homeroom teachers have access only to their students, I have to be able to remove all rights on that document when reassigning it to the next homeroom teacher.

This activity must be applied to a specific trustee.  In this case, you'll probably want to use the Find User or Find Group activity to choose which trustees should have rights removed.  You could use something like a Conditional Parallel followed by a series of branches containing different users and departments to remove the rights from the appropriate users.

This has become a huge issue when working with Cumulative folders as a large school district may have 200+ campuses and if we have 20+ security groups per campus then you can see where the workflow to remove all possible security would have to loop through 4000 possible security groups for every document it has to refile.  That is both time consuming and it is writing a ton of rows to the Workflow database when you are talking about the volume of documents for a school district with 200+ campuses.  Then add in that we are granting homeroom teachers access to their kids folders and we have to be able remove their access when kids change classrooms.  Thus I need to know if Laserfiche has any plans to add the option to "Remove all Non-Inherited Security" on an object as part of the Assign Rights activity?

If not, then I will have to start writing all of the security I assign to a multi-value field and then using that field so Workflow knows specifically what security to remove.  That is not the most elegant of options but it is the only way I can think of to still provide this functionality without having to repeat through thousands of possible security groups when trying to remove assigned security.

Well, I circled back to just using an SDK script to resolve this, which can be seen in the link Brandon provided in a previous response (Thanks again Brandon!!!).  I have a better understanding of why Laserfiche is fearful of this option in Laserfiche (or directly via the script) as it is a quick way to orphan a document but I am still hopeful they provide the option to remove all non-inherited security and have it error if doing so would leave the document orphaned.  

Hey Beau,

Is there a way to do this in 2022?  If not, is there an example of the SDK way of doing this?