This documentation refers to the unreleased development version of the Nuxeo Platform. For the current production version, refer to the 5.6 user guide.

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section
Column
width70%

Only users with management rights can manage the access rights of a space.

Wiki Markup
{multi-excerpt:name=access-rights-intro}
Managing access rights means granting or denying access rights in a space. The access rights management screen is available as a sub-tab in the *Manage* tab of the space.

The access rights management sub-tab is accessible composed of three parts:

!access-rights-interface.png|border=1,width=650!

# the *Inherited rights* part displays rights that were granted or denied in a parent space;
# the *Local rights* part displays the rights that were granted or denied in the current space;
# the form to grant or deny access rights in the current space.
{multi-excerpt}

Column
Panel
bgColor#FFFFFF
titleOn this page
Table of Contents

Rights prioritization

The access rights available are:

...

Wiki Markup
{multi-excerpt:name=access-rights-priorization}
As you can see, some rights include more permissions than others, and sometimes include other rights. That's the case for "Write", that includes "Remove".
Beside the fact that some rights are stronger than others, you should be aware, when you set up rights on a space, that some rights have priority over others:
* local rights have priority over inherited rights,
* granted rights have priority over denied rights.
The fact that the rights are given or denied to a single user or a group doesn't have any influence.
{multi-excerpt}

Granting access rights

To grant access rights:

Wiki Markup
{multi-excerpt:name=grant-access-rights-steps}
# Click on the *Manage* tab of the space.
The *Access Rights* sub-tab is displayed.
# In the form, type the username of the user you want to grant rights to.
To give access rights to a group, type the group's name.
The names of the users or groups corresponding to the typed characters are automatically displayed as you type.
!rights-form.png|border=1,width=350!
# Click on the user you want to give access rights to.
# Select the right to grant in the *Permission* drop down list.
!access-rights-selection.png|border=1!
# Click on the *Add permission* button.
The user and its rights are displayed in the *Local Rights* part of the screen.
!rights-granted.png|border=1,width=650!
# Save local rights modification by clicking on the *Save local rights* button.
Local rights are saved and applied.
{multi-excerpt}

Denying access rights

If a user has inherited rights that you don't want him to have in the current space, you can deny him these rights. If you want to deny access rights to a large number of users, block rights inheritance and give access rights only to the users you want to be able to access the workspace or section.

To deny access rights:

Wiki Markup
{multi-excerpt:name=deny-access-rights-steps}
# Click on the *Manage* tab of the space.
The *Access Rights* sub-tab is displayed.
# In the form, type the username of the user you want to grant rights to.
To deny access rights to a group, type the group's name.
The usernames corresponding to the typed characters are automatically displayed.
!rights-form.png|border=1,width=350!
# Click on the user you want to deny rights to.
# Select the right to deny in the *Permission* drop down list.
# Click on the *Add permission* button.
The user is in the *Local rights* form. The denied rights is displayed in the *Denied permissions* column.
!rights-denied.png|border=1,width=650!
# Save local rights modification by clicking on the *Save local rights* button.
Local rights are saved and applied.
{multi-excerpt}

Removing a user from local rights

If you want to refuse rights to a user, and that these rights have been granted in the current space, you can remove the user from the local rights.

To remove a user from the local rights:

Wiki Markup
{multi-excerpt:name=remove-local-rights}
# Click on the *Manage* tab of the space.
The *Access Rights* sub-tab is displayed.
# In the *Local Rights* part of the screen, check the box corresponding to the user you want to remove.
# Click on the *Remove permission(s)* button.
The user is removed from the *Local Rights* table.
!rights-local-no.png|border=1!
# Save local rights modification by clicking on the *Save local rights* button.
Local rights are saved and applied.
{multi-excerpt}

Blocking rights inheritance

The rights that are granted or denied in a space are applied to the space's content, including its sub-spaces. You thus have the same rights in the sub-spaces as in the parent space. That is called rights inheritance.

...