Restricting where users create content

Michael_Cohen

I have 100+ departments organized in the content system in folders based on brand:

- HGIntranet
   - Home
   - Department Pages
      - Grand
         - dept 1
         - dept 2
      - Hyatt
      - Hyatt Place
      - etc

A content authors group needs access to all folders under HGIntranet, but only write access to certain folders under the department pages section.  Our content authors continue to upload files in all types of interesting places I prefer them not to:  "Home, Department Pages, etc."   Is there some way to lock down higher level folders and allow users read access to these folders while allowing write access to lower level folders where content should reside?

Thanks

Evan_Bench

Quoted Michael Cohen on 2013-02-07 11:22:

I have 100+ departments organized in the content system in folders based on brand:

- HGIntranet
   - Home
   - Department Pages
      - Grand
         - dept 1
         - dept 2
      - Hyatt
      - Hyatt Place
      - etc

A content authors group needs access to all folders under HGIntranet, but only write access to certain folders under the department pages section.  Our content authors continue to upload files in all types of interesting places I prefer them not to:  "Home, Department Pages, etc."   Is there some way to lock down higher level folders and allow users read access to these folders while allowing write access to lower level folders where content should reside?

Thanks

Here is one way to do this:

1. Assign the content authors ldap group to a role that allows write access.

2. Associate this ldap group to any sub-folders that they are allowed to upload files to.

3. Make sure that the "All Users" group is associated to the parent folders

4. For each parent folder that you wish to restrict, set "VCM:WRITE" to "Deny" in the advanced security for the "All Users" group (but do not propagate this change downward).

This will allow a content author to make changes to subfolders (add content for example) but they won't be able to add anything to any parent folder that is restricted using 'Advanced Security". But they will be able to see these folders and navigate into them.

If this is unclear let me know and I'll post a screencapture of the steps needed.

Evan

 

Evan Bench

Technical Instructor

1 Place Jean Millier

Paris La Defense Cedex 92084

ebench@opentext.com