77 lines
5.7 KiB
Plaintext
77 lines
5.7 KiB
Plaintext
<%@ Control Language="C#" Inherits="BaseContentUserControls"%>
|
||
<%@ Register Namespace="TeamLab.Controls" Assembly="__Code" TagPrefix="cc" %>
|
||
|
||
<script runat="server">
|
||
protected override void Init()
|
||
{
|
||
PageTitle = PageCaption = "Folder permissions hierarchy in the Documents module";
|
||
MetaKeyWords = "folder permissions, group permissions, user permissions, access rights, Documents";
|
||
MetaDescription = "Documents. Find out how the permission priority order is implemented in the Documents module";
|
||
}
|
||
</script>
|
||
|
||
|
||
<div class="main_buscall_container dataBackup">
|
||
<div class="MainHelpCenter">
|
||
<h1 class="subHeaderFeaturesCaption TipsCaption">Folder permissions hierarchy in the Documents module</h1>
|
||
<div class="keyword_block">
|
||
<ul>
|
||
<li><cc:LocalizeContent runat="Server" ControlName="~/Controls/Help/Tags/onlyoffice-documents/onlyoffice-documents.ascx" /></li>
|
||
</ul>
|
||
</div>
|
||
|
||
|
||
|
||
<p>If you want to create a complex folder structure with several nesting levels and set different group permissions, it might be useful to know how the permission priority order is implemented in the <b>Documents</b> module.</p>
|
||
|
||
<h2 id="BasicPrinciples">Basic principles</h2>
|
||
<p>There are three levels of priorities in the <b>Documents</b> module (listed in order of increasing importance):</p>
|
||
<ol>
|
||
<li><b>Folder hierarchy</b>: <em>Parent folders</em> and <em>Subfolders</em>
|
||
<ul>
|
||
<li>If you do not specify certain permissions on a subfolder, the subfolder inherits the parent folder permissions.</li>
|
||
<li>If some specific permissions on a subfolder are set, permissions on the subfolder have the higher priority than permissions on its parent folder.</li>
|
||
</ul>
|
||
</li>
|
||
<li><b>Profile</b>: <em>Everyone</em>, <em>Groups</em>, <em>User</em>, <em>Admin</em>
|
||
<ul>
|
||
<li>User permissions have the higher priority than group permissions (i.e. you can assign permissions to an individual user, no matter which permissions has a group he/she belongs to).</li>
|
||
<li>There is no group hierarchy, all groups are equal (i.e. one group cannot have priority over another).</li>
|
||
</ul>
|
||
<p>Four levels of priority (listed in order of increasing importance):</p>
|
||
<p><img src="<%=VirtualPathUtility.ToAbsolute("~/images/Help/TipsTricks/folder_permissions/hierarchy.png")%>" /></p>
|
||
</li>
|
||
<li><b>Access rights</b>: <em>Full Access</em>, <em>Read Only</em>, <em>Access Denied</em>
|
||
<ul>
|
||
<li><b>Access Denied</b> access rights have the higher priority than <b>Read Only</b> access rights.</li>
|
||
<li><b>Read Only</b> access rights have the higher priority than <b>Full Access</b> access rights.</li>
|
||
<li>If a user belongs to several groups with different permissions on a folder, the user has access rights with the higher priority.</li>
|
||
</ul>
|
||
</li>
|
||
</ol>
|
||
<p>When a user is trying to access a shared folder, the permissions is checked in accordance with the priority order above:</p>
|
||
<ol>
|
||
<li>if the current folder has permissions that differ from the parent folder permissions,</li>
|
||
<li>which profile-based permissions are specified on the current folder,</li>
|
||
<li>which access rights has the user.</li>
|
||
</ol>
|
||
|
||
<h2 id="Examples">Examples</h2>
|
||
<h4>Example 1</h4>
|
||
<p>The following example illustrates the scenario when a user belongs to a group with <b>Full Access</b> permissions on the parent folder and <b>Read Only</b> permissions on the nested folder, while the user has been granted with individual <b>Full Access</b> permissions on the nested folder.</p>
|
||
<p><img src="<%=VirtualPathUtility.ToAbsolute("~/images/Help/TipsTricks/folder_permissions/example.png")%>" /></p>
|
||
<p>The following examples illustrate the scenarios when a user belongs to several groups with different permissions on a folder.</p>
|
||
<h4>Example 2</h4>
|
||
<p>If the first group has <b>Full Access</b> permissions on a folder and the second group has <b>Read Only</b> permissions on the same folder, the user who belongs to both the groups at the same time has permissions with the higher priority (in this case, <b>Read Only</b>).</p>
|
||
<p>If a user belongs to a group that does not have access to the folder and to a group with <b>Read Only</b> access, <b>Access Denied</b> permissions have the higher priority, consequently, the user does not have access to the folder.</p>
|
||
<p>If you want the user to have other access type, you need to provide individual permissions to him/her.</p>
|
||
<p><img src="<%=VirtualPathUtility.ToAbsolute("~/images/Help/TipsTricks/folder_permissions/example1.png")%>" /></p>
|
||
<h4>Example 3</h4>
|
||
<p>If a folder contains several subfolders, you can change permissions on the subfolders independently from the parent folder permissions.</p>
|
||
<p>If one and the same user belongs to several groups with different permissions, his/her permissions on every nested folder can be different depending on the permissions specified for each of the groups.</p>
|
||
<p><img src="<%=VirtualPathUtility.ToAbsolute("~/images/Help/TipsTricks/folder_permissions/example2.png")%>" /></p>
|
||
|
||
</div>
|
||
</div>
|
||
|