Working with Entry Access Rights

The Access Rights tab, in the Entry Access dialog box, allows privileged users to view the access rights that all users and groups have to a document or folder. It also allows the modification of those rights. Learn more about specific entry access rights.

Entry access rights are assigned on an entry to:

When assigning a user's or group's entry access rights to a folder, you will need to determine scope: if the assigned rights can affect the current folder, subfolders, and/or documents contained in the current folder. The Scope and Entry Access Rights topic explains the different types of scopes and how entry access rights are inherited.

Example: The SALES group requires the ability to see all subfolders, but not the documents contained in the Sales folder. To do this, the administrator grants the Browse and Read entry access right on the folder to the SALES group using the "This folder, subfolders and documents" scope. He then denies the Browse entry access right on the folder to the SALES group using the "Documents that are immediate children only" scope. This creates a configuration where members of the SALES group can view the contents of all subfolders, while still preventing them from knowing if the parent folder contains documents.

  • Selected Entry: The document or folder path.
  • Show inherited rights: This option defines whether or note inherited rights will be displayed.
    • If this checkbox is selected the access rights inherited from parent folders as well as the access rights explicitly set on the selected document or folder will be displayed. If this checkbox is cleared the access rights explicitly set on the selected document or folder will be displayed.
  • Access control table: All users and groups that have been allowed or denied entry access rights on the current document or folder. It can also display a list of parent folders from which entry access rights are being inherited.
    • Trustee: Users and groups with rights assignments that affect the selected document or folder.
    • Inherited From: The inheritance relation between the rights set for the trustee in the corresponding row and the selected document or folder.
    • Scope: The scope of the set of rights for the trustee in the corresponding row. See Scope and Entry Access Rights for more information on the various scopes available.
  • Add: Create a new set of access rights for a user or group for the selected document or folder. Opens the Create Access Control Entry dialog box.
  • Remove: Deletes rights specifically assigned to the currently selected user or group. This does not deny all rights to the user or group, rights will be inherited as normal.
  • Access rights table: The entry access rights assigned to a particular user or group or inherited from a parent folder.
    • Right: A list of entry access rights. See Entry Access Rights for details about specific rights.
    • Allow: If an entry access right has been granted to a user or group. This checkbox can only be selected when viewing assigned entry access rights. Inherited entry access rights can only be modified from the parent folder where those rights were set.
    • Deny: If an entry access right has been denied to a user or group. This checkbox can only be selected when viewing assigned entry access rights. Inherited entry access rights can only be modified from the parent folder where those rights were set.

    Tip: Leave both the Allow and Deny columns blank to use inheritance.

  • Allow All: Grants all rights to the currently selected user or group.
  • Clear All: Clears all rights to the currently selected user or group.
  • Deny All: Denies all rights to the currently selected user or group.
  • Inherit rights from parent and include with specified rights: Access rights are inherited from a parent folder.
    • If this checkbox is selected the selected document or folder is affected by the access rights assigned to its parent folders.If this checkbox is cleared the selected document or folder is not affected by the access rights assigned to its parent folders.

To assign entry access rights in the Windows client

  1. Start the Laserfiche Windows client and log in to the appropriate repository as a user with either the Manage Entry Access privilege or the Write Entry Security entry access right on the entries you want to secure.
  2. Select the entry you want to secure and, from the Tools menu, click Access Rights. Or, right-click the entry you want to secure and select Access Rights from the context menu. The Entry Access dialog box that appears allows you to set access rights for all users. The top half of the Access Rights tab contains a list of entry access rights settings that affect the selected document or folder. The bottom half of the tab contains a list of available entry access rights.
  3. Add the trustee you want to assign or deny rights by clicking Add to explicitly assign entry access rights on that folder or document.
    1. In the Choose Trustee dialog box, click a user or group in the Select a trustee listing.
    2. When setting rights for a document, the only available option under Scope Selection is This entry only. More scopes are available when setting rights for a folder. See Scope and Entry Access Rights for more information on the various scopes available.
    3. Click OK. The user or group you chose will be displayed in the Trustee listing.
  4. Specify the entry access rights that you want to assign or deny by selecting the check boxes in the Allow or Deny columns to allow or deny the respective right. See Entry Access Rights for details about specific rights.

    Tip: Leave both the Allow and Deny columns blank to use inheritance.

    • Select the Inherit rights from parent and include with specified rights option to allow the current document or folder to inherit access rights. Note that this will apply to all users who attempt to access the entry.

      Important: It is strongly recommend that you leave this option selected, as it makes entry access rights much easier to maintain and troubleshoot

  5. Click OK to save your changes.

To assign entry access rights in the web client

  1. Start the Laserfiche web client and log in to the appropriate repository as a user with either the Manage Entry Access privileges or the Write Entry Security entry access right on the entries you want to secure.
  2. Select the entry you want to secure and, from the File menu, click Access Rights. Or, right-click the entry you want to secure and select Access Rights from the context menu. The Entry Access dialog box that appears allows you to set access rights for all users. The top half of the Access Rights tab contains a list of entry access rights settings that affect the selected document or folder. The bottom half of the tab contains a list of available entry access rights.
  3. Add the trustee you want to assign or deny rights by clicking Add to explicitly assign entry access rights on that folder or document.
    1. Select a user or group from the Trustee list, or search for a user or group by typing their name and clicking Search.
    2. When setting rights for a document, the only available option under Scope Selection is This entry only. More scopes are available when setting rights for a folder. See Scope and Entry Access Rights for more information on the various scopes available.
    3. Click Add.
  4. Specify the entry access rights that you want to assign or deny by selecting the check boxes in the Allow or Deny columns to allow or deny the respective right. See Entry Access Rights for details about specific rights.

    Tip: Leave both the Allow and Deny columns blank to use inheritance.

    • Select the Inherit rights from parent and include with specified rights option to allow the current document or folder to inherit access rights. Note that this will apply to all users who attempt to access the entry.

      Important: It is strongly recommend that you leave this option selected, as it makes entry access rights much easier to maintain and troubleshoot

  5. Click Save to save your changes.

Related Topics