I have a custom Schema called “ITAR.itar_doc” which can be set to either “Yes” or “No” by the administrator. I also made a group called “non_itar”.

What I want to do is remove the “Read” privilege from a local file for the group, “non_itar”, when the Schema “ITAR.itar_doc” has the value of “Yes”.

Any ideas? Thanks!