Local Deny permission

Hi,

I would like to change the local rights of a Folder in my domain. I need to deny read access to the group “Group for organizations: FFBS” (see screenshot) which has global read access on the domain.

As per this documentation: Nuxeo Doc

I should see two dropdowns to add new security rules:

  • Action
  • Permission

As you see below, I only see “Permission” which grants access but doesn't deny it.

Am I missing something?

Thank you

alt text

0 votes

1 answers

1144 views

ANSWER

Could this be because I created this folder using the "structure template" ?
12/21/2014



Found it. It was actually in the doc but I missed it. http://doc.nuxeo.com/display/USERDOC/Managing+Access+Rights

In a default configuration, it is not possible to deny access rights. It can however be enabled by a system administrator, using the nuxeo.security.allowNegativeACL parameter in the nuxeo.conf file.

nuxeo.security.allowNegativeACL=true
0 votes