Config the access control to a specific project

Shuai_Hua

I have submitted my question to VOLSS but the reply seems not work. I am not sure if someone else has done similar before, but I'd like to post my question here and see if someone has any ideas.

Here is my question:

Assume we have one CTD called Policy_CTD and we have two project folder
ProjectA and ProjectB. We will create a few content instances for Policy_CTD
and associate to ProjectA and ProjcetB. We will also have a group of user in a
group called GroupA. What we want is that the users in GroupA can access both
ProjectA and ProjectB and view the content instances of Policy_CTD. But, in
ProjectA , these users can not edit the content instances but in ProjectB,
these users can edit the content instances. Is this can be done?

Here is reply fro VOLSS:

Please try this:

- Create Role A with what capabilities you want users on Project A
- Create Role B with what capabilities you want users on Project B
- Create Group A and Group B with same users
- Associate Group A to Role A and to Project A
- Associate Group B to Role B and Project B

Basically, by separating the group and role association, you might be able to
achieve the results. Having said that, capabilities are associated at object
level and can't be controlled at Project level but try the above anyways.

 

After I implement their suggestion, it is still not work. I can associate to both Probject A and B, and then edit the content item

Selvi_Thangavel

The reply from VOLSS should work...We havesimilar similar security set up in place and works.

- Create Role A with what capabilities you want users onProject A, here make sure the capability Policy_CTD_WRITE(<XML_NAME>_WRITE)is NOT ADDED to Role A
- Create Role B with what capabilities you want users on Project B,  heremake sure the capability Policy_CTD_WRITE(<XML_NAME>_WRITE) is ADDEDto Role B

From:	"eLink Entry: Vignette V7 and V8Web Content Management" <v7webcontentmanagement@elinkkc.opentext.com>
To:	"eLink Recipient" <devnull@elinkkc.opentext.com>
Date:	09/03/2010 09:02 PM
Subject:	Config the access control to a specificproject

---

Configthe access control to a specific project

Posted by shuai.h.hua@seagate.com(Hua, Shuai) On 2010/09/03 21:01

I have submitted my question to VOLSS but the reply seemsnot work. I am not sure if someone else has done similar before, but I'dlike to post my question here and see if someone has any ideas. Here is my question: Assume we have one CTD called Policy_CTD and we have twoproject folder ProjectA and ProjectB. We will create a few content instances for Policy_CTD and associate to ProjectA and ProjcetB. We will also have a group of userin a group called GroupA. What we want is that the users in GroupA can accessboth ProjectA and ProjectB and view the content instances of Policy_CTD. But,in ProjectA , these users can not edit the content instances but in ProjectB, these users can edit the content instances. Is this can be done? Here is reply fro VOLSS: Please try this: - Create Role A with what capabilities you want users on Project A - Create Role B with what capabilities you want ! users on Project B - Create Group A and Group B with same users - Associate Group A to Role A and to Project A - Associate Group B to Role B and Project B Basically, by separating the group and role association, you might be ableto achieve the results. Having said that, capabilities are associated at object level and can't be controlled at Project level but try the above anyways.   After I implement their suggestion, it is still not work.I can associate to both Probject A and B, and then edit the content item

---

[To post a comment, use the normal replyfunction]
Forum:	VignetteV7 and V8 Web Content Management
Livelink Server:	knowledge-wlweb01