RE: CMS Roles/Permissions

thumbnail
Achmed Tyrannus Albab, modified 5 Years ago. Regular Member Posts: 158 Join Date: 3/5/10 Recent Posts
Hi,
I have 1 site, with 1 Super Administrator and 3 Administrators.
What I am trying to do is, to create one Main Directory in Documents and Media and 3 Sub Directories within it namely Sub One, Sub Two and Sub Three.

I am assigning Administrator 1 to Sub One directory,  Administrator 2 to Sub Two and so on.
I don't want Administrator 1 to be able to view Sub Two directory while in Control Panel or while updating content via Web Content Display browse option.
BUT, i want the content uploaded by any Administrator be viewed by any Guest/Users.

In short, i want to restrict access/view for admin for certain directories within Documents and Media in Control Panel BUT not restrict them to view the file on the site.

The closest one I have is removing the View option in permission of the directory for unintended Administrators and also Guests. 
This kind of worked, BUT when i try to view the site with the uploaded file, it is still hidden if you are not Administrator 1.
This happens even after i set the permission for the file itself to view able by everyone. It is still following the permission by the parent directory.

I hope my explanation is clear. I am still trying to work this out. Any suggestions are welcomed.
​​​​​​​Thanks.
thumbnail
David H Nebinger, modified 5 Years ago. Liferay Legend Posts: 14933 Join Date: 9/2/06 Recent Posts
You can't solve this through permissions...

In order to see contents within a folder, you have to have permission on the folder too. So you won't be able to do this using permissions on the folders.

There is a D&M portlet, non control panel, that you can set a root folder in.  So I'd create a page, drop 3 of these guys on it, each setting the root folder to one of the subs, but then set the view permission on the portlet to the sub admin role.

In this way you're controlling access to the D&M portlet, but not the underlying folder.

And keep the folks out of the control panel. If they're not admins, they shouldn't be in there. If they are admins, then you gotta trust them as an admin.
thumbnail
Achmed Tyrannus Albab, modified 5 Years ago. Regular Member Posts: 158 Join Date: 3/5/10 Recent Posts
Awesome work around. Thanks