Create Folder Activity ACL

Hello,

I have a repository set with folder security so I set an ACL to a cabinet and whenever i manually create a dm_folder, it inherits the cabinets ACL.

I have created a process that creates folders in that cabinet using the Create Folder Activity but the created folders does not inherit the ACL.

How can I make to inherit the cabinet ACL?

Find more posts tagged with

Comments

JorgKrause

Hi,

I guess you haven't understood the feature of folder security completely. Here's a part from CS Admin guide

Folder security is an additional level of security that supplements the existing repository security.Implementing this security option further restricts allowable operations in a repository. Foldersecurity prevents unauthorized users from adding documents to, removing documents from, orchanging contents of secured folders. When folder security is enabled, a user must have Writepermission or Change Folder Links permission for the:• Target folder to create, import, copy, or link an object into the folder.• Source folder to move or delete an object from a folder.

Inheriting of ACL is controlled by another parameter, Inherit permission set from

Check Server Configuration in DA, as shown in the attached picture

Regards

Jørg

jtrellest

Jorg,

Yes, I should have refered to that feature and not to folder security. My repository is configured like shown on the picture.

I have updated the template folder ACL and it seems that the Create Folder Activity uses the template folder ACL rather than inheriting the ACL from the target container.

JorgKrause

Hmh,

I don't have PB available right now, so I can't check the Create Folder Activity. If you've set Inherit Permission Set from Folder, CS will automatically use the ACL of the folder you're creating an object in.

You can easily check this by a simple DQL

create dm_folder object set object_name = 'Something' LINK ('/<Cabinet>')

The newly created folder should have the same ACL as the cabinet, right?

Does Create Folder Activity have any ACL parameters you can set?

Regards

Jørg

jtrellest

If created using Webtop it works as expected but with the Create Folder Activity, it takes the folder's template ACL.

The activity does not have ACL parameters to set.

JorgKrause

Well,

Unless it somewhere stated the Create Folder Activity is actually setting its own ACL, I would consider this a bug.

Should most likely be reported as such, but that doesn't help you a lot at this point, does it?

Workaround is of course to create an auto-activity that sets the correct ACL for the newly created folder.

Regards

Jørg

jtrellest

I'm setting for the moment the folder's template ACL as the desired one but in some cases I would use an auto-activity. I will check it up with Support.

Thanks Jorg

DCTM_Guru

Doesnt the activity have a configuration option to set the ACL? This might be overwriting the inherit ACL option. You should be able to retrieve ACL on the parent folder using Process Data Mapper and then use it to set the ACL in this activity.

JorgKrause

Hi,

I looked into it at the office, and I can't find any additional settings for this template :-(

You may choose a template folder, or a new name.

The strange thing is that ACL is set correctly in both cases in our environment, though.

We do have inherit permission set from folder, but we Folder Security is off.

I wonder if Folder Security is On in your environment?

Regards

Jørg