You are viewing limited content. For full access, please sign in.

Question

Question

Assign Rights - Workflow

asked on June 14, 2015

My workflow has a number of approval levels for a Loan Application based on total Loan Amount.

I have used a Routing Decision to direct the document to particular approvers based on the total amount. They all have access to the document.  I want to restrict the access to the Approval Field by using Assign Rights within workflow.

I have set Assign Rights to Deny Change Metadata for Everybody.

I have then set Assign Rights to Allow Change Metadata for Approver1.

But the Allow right does not over-write the Deny right in the workflow.  Approver1 is still not allowed to Change Metadata.

Is there any way to "un-Deny" the right once it is set to Deny in workflow?

 

0 0

Answer

SELECTED ANSWER
replied on June 15, 2015

I had a similar issue with denying and reassigning rights in workflow. I switched over to having workflow apply and remove security tags which has worked great.

0 0
replied on June 15, 2015

Thanks Nathan, Tags appear to be the way to go.  

0 0

Replies

replied on June 15, 2015

You would have to use the "Remove all rights" and then set your permissions. This will clear assigned rights which aren't inherited.

 

Having deny's in the everybody group is a general practice to avoid cause it gets messy. Is there another way you can use permissions to accomplish your goal without it?

 

Cheers,

Carl

 

0 0
replied on June 15, 2015

Thanks Carl.  You are right, Deny can get messy.

I have reverted to moving the image through a set of approval folders.

 

0 0
replied on March 30, 2021

I have a similar question for Avante on prem. We want to have workflow create a folder if one doesn't exsit and move a document into that folder in the repository. Once the document is in that folder, we want users to have View permissions only. 

The Assign Rights in Workflow offers rights granted and rights denied, but not a read only option. Will the Workflow permissions granted that are set at view/browse achieve this?

Also, how do the workflow permissions and general repository settings interact, if at all?

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.