[D2] How to propagate security after property modification on parent folder ?

xchen-eQlqL

Hello,

Playing with D2 since several days and stuck in the following use case :

Cabinet Projects

          Project A (repeating attr : managers)

               Sub Project 1

               Sub Project 2

               ...

          Project B

               Sub Project 3

               Sub Project 4

               ...

          ...

The Security model applied to Project object is :

     property managers -> WRITE, for example, if we have manager_1 and manager_2 in this attr, both users will have WRITE permission.

The Security model applied to Sub Project object is  : FOLDER

So it works fine in creation, the Sub Projects will use the same ACL as its parent Project object.

Now we add manager_3 to the attr managers of Project A, its ACL will change, manager_3 is added as a accessor. But the new ACL will not propagate to all the sub projects.

Is there a way answer this requirement by configuration ?

Best Regards,

Xiangang

DCTM_Guru

Instead of adding the user directly to the folder, you should be defining a system acl (eg project_A_acl) and assigning this acl to the folder.  Then you just need to add manager_3 to the acl and his access is granted to all folders/objects created underneath that folder.