nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Controlling access to folders under data folder

anjanas

TS741, WS8

------------------

I have a requirement according to which, different DCRs are generated from one datatype. Now these DCRs's content populate pages on portal. So these DCRs are exclusive to some pages and need to be created and modified by dedicated user group only (On TeamSite), who have Editor role.

DCT - Table_Updates

DCR1 - Table_Updates_finance (can be created and modified by Table_Updates_finance group only)

DCR2 - Table_Updates_hr (can be created and modified by Table_Updates_hr group only)

DCR3 - Table_Updates_planning (can be created and modified by Table_Updates_planning group only)

I can control datatype access using templating.cfg, But can I control DCR access to different groups ?

May be I can create sub folders under data folder by the names finance, hr and planning and each DCR created of a particular type should be allowed to store in respective folder only.

I saw "vpth-regex" in manual. May be I can control access to a particular folder using vpath-regex (whiuch I am not sure), but how can I control that a Table_Updates_finance DCR is allowed to be stored in finance sub-folder only ?

My best idea is to go for different DCTs for each dcr type. But I am not getting positive response. So I have to look for different logic.

Thanks

Find more posts tagged with

Comments

David Smith

anjanas wrote:
May be I can create sub folders under data folder by the names finance, hr and planning and each DCR created of a particular type should be allowed to store in respective folder only.

This is exactly the design we use. Using submit.cfg to control access by specific groups representing different departments based on the folder path and using available_models.xml to control access to workflows and custom java code to handle approval groups for the various departments.

Adam Stoller

Another possibility is to use FormAPI / callServer code to check the user's credentials (group membership, whatever) against a list based on the "dcr-type" (field within DCR, filename, whatever) on form load - and if the credentials don't match, display an informative message (e.g.: "You are not allowed to edit this DCR - contact ...") and close the window or at least mark everything as read-only.