Hi Delphine,

From what I understand, you section 1-1 is under section 1 ? In that case you need read access on section 1 to access section 1-1 as, in the publication tab, you unfold the sections to get to the one you want, so you need read access on the full tree down to the section you need. This behaviour is probably not ideal, but is not a bug :)

Given your permission example the solution could be to give the reading permission for Y on section1 (and section 1-1 by inheritance) and in the WS B, restrict the publication target to 1-1 in the manage tab of the ws.

Hope it helps

Fred

Hi,

From what I understand from your description, user Y should be able to submit documents from workspace B to publication in section S1-1. However, he cannot submit documents from workspaces A, A1 and A2.

The rights required to be able to submit a document for publication are:

• Write in the workspace where the document is created (here that would be workspace B),
• and Read in the section in which the user wants to publish. On a standard Nuxeo application, members are all granted “read” right at the application's root by default. So, if you haven't block the rights inheritance, user Y has Read on section S1-1.

The documentation on publishing is here: http://doc.nuxeo.com/x/aYWo