Assigning role to a group and granting permissions

rutu

TeamSite 7.4.1, Win Server 2008

 

I have created a two roles, Br_Editor and Br_Admin

Br_Admin role is granted Administrator level access, while Br_Editor is granted Editor access. I am adding both groups to a Product branch and Promotion branch (sub branch of Product) is inheriting these two groups from Product.

 

I have created workarea "common" under Promotion branch and I am granting "Full Control" to Br_Editor. I am nesting Br_Admin under Br_Editor.

1) Does it mean that Br_Admin will have same privileges as Br_Editor ? Eventhough Br_Admin group has Admin role ?

2) If I am adding both groups separately with Br_Editor having Full Control while Br_Admin having read only access. Does it mean that Br_Admin which has higher privileges at branch level, will have lesser privileges than Br_Editor at workarea level ?

3) So access at workarea level has nothing to do with default access granted to group while adding that group to TeamSite ?

 

Thanks

Rick Poulin

1) no, it's going to be the union of the allowed operations of all roles

 

2) kinda. if we were talking about any two roles, then the group that has read-only would have the same allowed operations but would not be able to change any files, thus the overall permissions would be "less" than the editors. However, the Adminstrator role has a "allow bypassing workarea permissions" set to true, which means this makes no difference within the UI (but still impacts the iwmnt path).

 

3) this statement makes no sense, but is probably wrong.