Need Help | TeamSite Access Controls

Vivek552

Hi All,

This is regarding the teamsite access control behavior, we have requirement to restrict certain DCTs to certain groups and we are utilizing branch/templating.cfg/folder/file permissions to achieve the same.

But due to some reasons, the access control is not working as expected. Can you please go-through below and let us know if we are following correct approach?

We have following two users and two groups.
user1 - group1
user2 - group2

1) We gave editor permission to group1, group2 groups to one of the branch, say english. So that user1 and user2 have editor permissions on english branch.
2) In templating.cfg, user1 is given access to one of the template, say template1, and user2 is given access to second template, template2.

[data-type dcr-type="xml" name="template1"]
[allowed][or]
[cred group="group1"/]
[/or][/allowed]
..
..
..
[/data-type]
[data-type dcr-type="xml" name="template2"]
[allowed][or]
[cred group="group2"/]
[/or][/allowed]
..
..
..
[/data-type]

(replaced < > with [] in the above code )

3) For folders and dcrs like datatype folder, data, first.dcr, second.dcr, we have 775 permission. ( The owner ship is given to "Super User" as owner and "siagroup" as group. "siagroup" is superset group and it contains all the users)


As per the above settings, expected behavior is that user1 should able to create/edit only template1 DCRs and user2 should able to create/edit template2 DCRs.
But actual behavior we are observing is that restriction is getting limited to only creation of DCRs.
i.e., template1 DCR creation is getting limited to only user1 (which is expected) but edit functionality is available to both user1 and user2 (which is not expected).

Please go-through the above settings and let us know where we are going wrong in the settings.

Thanks for your help in advance.

Vivek552

Can you please help...