Hello,

I use Nuxeo 10.10 with postgresql 11. I try to add an “unlock” permission to a group named “gestionnaire”. User in this group can read write and *unlock * documents

What i have done :

I deployed a contribution following https://doc.nuxeo.com/nxdoc/1010/how-to-grant-the-edit-permission-without-the-remove-permission/

<component name="fr.my.project.permissions">
    <require>org.nuxeo.runtime.started</require>
    <extension target="org.nuxeo.ecm.core.security.SecurityService" point="permissions">
        <permission name="ReadWriteAndUnlock">
            <include>ReadWrite</include>
            <include>Unlock</include>
        </permission>
    </extension>

    <!-- https://github.com/nuxeo/nuxeo/blob/master/nuxeo-core/nuxeo-core/src/main/resources/OSGI-INF/permissions-contrib.xml -->
    <extension  target="org.nuxeo.ecm.core.security.SecurityService" point="permissionsVisibility">
        <visibility>
            <item order="10" show="true">Read</item>
            <item order="50" denyPermission="Write" show="true">ReadWrite</item>
            <item order="55" denyPermission="Unlock" show="true">ReadWriteAndUnlock</item>
            <item order="100" show="true">Everything</item>
    </extension>
</component>

On repository, i added permissions on the workspace

What i expect :

A user in default “members” group can lock a document he created. (So he can unlock it too) A user in “manager” group can unlock a document locked by a user of “member"s group (because i had unlock permission)

The problem :

A user in “manager” group can't unlock a document locked by a user of “member"s group. No unlock button is diplayed in webui.

What did I miss?

Thank you.