Effective Permissions
Remember: Any trustee—Laserfiche or Windows users, and Laserfiche or Windows groups—can be a member of a Laserfiche group. This membership allows that user or group to inherit the permissions assigned to the group. There is no way to block a user's inheritance of a group's permissions. This is especially important for access rights, since denied access rights take precedence over allowed access rights. Therefore, if you do not want a user to inherit all permissions assigned to a particular group, you should remove that user from that group.
Access rights can be denied to a user or group. If a particular right has been denied to a user or to a group to which that user belongs, he or she will not be granted that right, even if he or she has also had that right allowed (either directly or as part of another group). Denied status overrides the allowed status. The other topics in this section provide more information on how effective access rights are calculated.
How different types of security interact
- Interactions Between Permissions
- Access Rights Implications
- Effective Access Rights Calculation
- When do Security Changes Take Effect?
Viewing Effective Rights