Zachary,
I appreciate your response and suggestions. I see that the utility you mention could have some value in a Laserfiche Administrator's toolbox but it won't work for my needs because it is a manually operated utility. I need a workflow activity that can be applied to a single entry to wipe out its explicitly defined permissions. I would like to use this activity prior to defining new permissions in the workflow.
Your idea to iterate all users and/or groups while calling the "Assign Rights" activity is not an option for our environment because the number of users and groups in our environment. This would be a very inefficient process. I do appreciate the idea though.
I have found in the Laserfiche SDK 9.0 .NET documentation a method that will reset permissions and apply newly defined ones. EntrySecurity. ResetAccessRule Method (EntryAccessRule). It works very well. I do still wish there was a method of resetting explicit permissions on an entry without specifying any new permissions. If you want the script to just reset EntryAccessRules without applying a new one you could always add ES.RemoveAccessRule(EAR); after the line ES.ResetAccessRule(EAR); basically wiping out all access rules including the one you were required to specify in the ResetAccessRule method.
EntryInfo EI = Entry.GetEntryInfo(EID, mySess);
EntrySecurity ES = EI.GetAccessControl();
EntryAccessRule EAR = new EntryAccessRule(new AccountReference("Campus A Managers", mySess), EntryRights.Read, EntryAccessScope.ThisEntry, System.Security.AccessControl.AccessControlType.Allow);
ES.ResetAccessRule(EAR);
EI.SetAccessControl(ES);
EI.Save();
Perhaps you could make this an official feature request to make this a new workflow activity or enhance the "Assign Rights" activity to not require a trustee when resetting permissions to inherited ones only.
