Group Access permissions on Localized folders

PreetpalSingh

Hi,


Scenario:

We have implemented the GCM solution for our website. We have restricted the user access by having different groups on different folders, like groupUS has FullAccess on data folder and groupCA has read access. Similarly, the group groupCA has FullAccess on the folders fr_CA and en_CA and groupUS has read access, as shown below.

The master DCRs are in the data folder and on localizing the master DCRs, the corresponding child DCRs get created under en_CA and fr_CA respectively, depending on the locale selected.


templatedata

|

+- -article

|

+-- data (groupUS:FullAccess, groupCA:read)

|

+-- en_CA (groupCA:FullAccess, groupUS:read)

|

+-- fr_CA (groupCA:FullAccess, groupUS:read)


Problem:

On creation of the child DCRs, they must inherit the permissions of the en_CA or fr_CA folders, but they dont. The child DCRs still carry the groups of the master site only. This causes the problem of the canada group users not able to access the canadian version of the content. The folder permissions change as below:


templatedata

|

+- -article

|

+-- data (groupUS:FullAccess, groupCA:read)

|

+-- en_CA (groupCA:FullAccess, groupUS:read)

| |

| +DCR_canada(groupUS:FullAccess, groupCA:read)

|

+-- fr_CA (groupCA:FullAccess, groupUS:read)

|

+DCR_canada(groupUS:FullAccess, groupCA:read)



What i have tried?

I have created a trigger on the CreateFSE. On this i call a java class that checks if the created asset in Teamsite is a File and then execute the iwaccess CLT,


iwaccess.exe set-windows-inheritance FilePath true



This reapplies the permissions to be inherited on the files from the parent folder.