Acclaimed Contributor.. Joshua Hutley Acclaimed Contributor..
Acclaimed Contributor..
343 views

Has anyone implemented this new access control feature in CM9?

Jump to solution

CM9 includes the ability to change the access of a record within a folder to include the addition of any location(s) while still retaining the reference to the folder access control.

You enable this by checking the box on the security and access policy tab.

"also include any locations in the corresponding access control access control of the container record"

In this example access might look like this

View Document: Hutley, Joshua + container 19/1234 locations (IN-View)

View Metadata: Hutley, Joshua + container 19/1234 locations (IN-View)

Therefore, both myself and the locations within (IN-View) should be able to see the record.

Is anyone using this new feature?

Are there any known issues/limitations?

I would like to use this new feature because it allows you to alter the access of contained record(s) but still reference the parent folder.

And, if the parent folder access is changed, the altered contained record is still updated.

 

1 Solution

Accepted Solutions
Highlighted
Outstanding Contributor.. Steve Macukat Outstanding Contributor..
Outstanding Contributor..

Re: Has anyone implemented this new access control feature in CM9?

Jump to solution

We use this quite a bit.  It works well for individual documents.  The main limitation is that the change doesn't propogate to records contained at the 3rd & lower levels.  For example if I change the access on a subfolder;

Before the change:

  • Folder - Access is restricted to people in (Records Branch)
  • Sub-folder - Access is based on container
  • Document - Access is based on a container

We add a person to the access control of the subfolder:

  • Folder - Access is restricted to people in (Records Branch)
  • Sub-folder - Access is based on container + Joshua Hartley (Records Branch or Joshua Hartley)
  • Document - Access is based on a container (Records Branch).

Joshua Hartley sees the Subfolder, but not the contained documents.

If we want to apply the change to the contained documents as well, we either update those manually, or we need to remove the "based on container" access control from the Subfolder, which is how we did it in previous versions.

  • Folder - Access is restricted to people in (Records Branch)
  • Sub-folder - Access is restricted people in (Records Branch or Joshua Hartley)
  • Document - Access is based on a container (Records Branch or Joshua Hartley)

Cheers

SM

0 Likes
2 Replies
Highlighted
Outstanding Contributor.. Steve Macukat Outstanding Contributor..
Outstanding Contributor..

Re: Has anyone implemented this new access control feature in CM9?

Jump to solution

We use this quite a bit.  It works well for individual documents.  The main limitation is that the change doesn't propogate to records contained at the 3rd & lower levels.  For example if I change the access on a subfolder;

Before the change:

  • Folder - Access is restricted to people in (Records Branch)
  • Sub-folder - Access is based on container
  • Document - Access is based on a container

We add a person to the access control of the subfolder:

  • Folder - Access is restricted to people in (Records Branch)
  • Sub-folder - Access is based on container + Joshua Hartley (Records Branch or Joshua Hartley)
  • Document - Access is based on a container (Records Branch).

Joshua Hartley sees the Subfolder, but not the contained documents.

If we want to apply the change to the contained documents as well, we either update those manually, or we need to remove the "based on container" access control from the Subfolder, which is how we did it in previous versions.

  • Folder - Access is restricted to people in (Records Branch)
  • Sub-folder - Access is restricted people in (Records Branch or Joshua Hartley)
  • Document - Access is based on a container (Records Branch or Joshua Hartley)

Cheers

SM

0 Likes
Acclaimed Contributor.. Joshua Hutley Acclaimed Contributor..
Acclaimed Contributor..

Re: Has anyone implemented this new access control feature in CM9?

Jump to solution

That’s very helpful because that is exactly what we are seeing.

This has to be a bug right?

It seems that CM is not correctly identifying that the subfolder is now different from the parent folder access and therefore not updating the access on contained records appropriately.  

This is a nice feature, we given this limitation I cannot see us using it at present

 

 

 

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.