Permissions issue in TS 7.3.2

Volcano

Teamsite Version : 7.3.2

Windows Server 2008

In order provide editor access to a workarea

1. Org.Editors group (should have Editor access to the branch/wa)

2. Org.All group (Should have Admin access to the branch/wa)

- While creating the workarea, selected "group" option and selected "Org.All " as the grouu to have access.

- added Org.Editors to the branch as Editors.

- added Org.Editors to the workarea using permissions tab with "Full" access (RWSDPO)

When I see the files and folders inside the workarea it shows both groups Org.Editors and Org.All has FULL access to the workarea.

However, User in Org.Editors has got "EDIT" option Disabled.

Only Users in Org.All has got Edit option ENABELD.

Am I doing any thing wrong. Theoritically I believe, doing right. Please guide me if I am doing anything wrong.

Find more posts tagged with

Comments

Rick Poulin

It's wrong because the editors are not in the owners of the workarea. What you should do is create a group that contains the union of all users/groups that should have access to that workarea, and then make finer-grained permissions within using ACLs. Use a TeamSite group for this even if your Org.Editors and Org.All groups are OS groups -- TS groups support nesting so it'll be easier to manage.

Volcano

Sorry I didnt' mention couple of points

1. These all are teamsite groups (Org.All and Org.Editors)

2. I have given Org.All as the main group on the workarea. I added Org.Editors to the "Org.All" group. But still the users in in Org.Editors has "Edit" link disabled.

Even let me think that #2 is a bug/issue with teamsite, however

If (Org.All is having full access (RWXDPO) to the workarea) & If (Org.Editors added to Org.All group){

--Does it mean Org.Editors users has full access to the workarea along with users in Org.All.

----If (yes){

------Can I control the access level of Org.Editors using permissions set on workarea?

------if(Yes){

--------Is there any way to have additional options on workarea permissions other than Full, ReadOnly, Modify.For e.g. Change etc.

------}

----}

}

Sorry for the pseudo code above, I couldnot get a better way to explain :-)

Rick Poulin

But still the users in in Org.Editors has "Edit" link disabled.

There's occasionally some weird cache on this. Running iwreset (or waiting a while) usually clears it up.

Does it mean Org.Editors users has full access to the workarea along with users in Org.All.

Yes, provided the current folder context doesn't have an ACL that says otherwise.

Can I control the access level of Org.Editors using permissions set on workarea?

Not at the workarea level, but you can change the ACLs on any folder. Note that the available operations granted by the role is a different story.

Is there any way to have additional options on workarea permissions other than Full, ReadOnly, Modify.For e.g. Change etc.

Technically yes. You have to use the 'iwaccess' CLT to use that, but I would seek alternative approaches if at all possible. Using these gets confusing and maintenance-heavy really quickly.

Note, you might have a typo in your original post. You said Org.All was an admin on the branch, but your latest post confuses that.. Did you mean Org.Admin as your group name?

Volcano

Sorry about that typo, I meant the group given in the workarea properties. I dont know what is the name used may be "owner group".

But still the users in in Org.Editors has "Edit" link disabled.

There's occasionally some weird cache on this. Running iwreset (or waiting a while) usually clears it up.

-- Yes, you are right. I had this issue in 7.2, Linux. But new version (7.3.2) new environment (windows) and the issue is not resolved even after reset, given couple of hours, closing browser, removing browser cache.

But suddenly the problem resolved after removing the my browser cache once again now and reopened in a new browser. WIERD. :-). What so ever problem resolved.

Thanks alot.

Rick Poulin

Glad to help. Please mark one or more of these posts as the "solution" to effectively close the thread.