Effective Rights

The Effective Rights tab of the Entry Access dialog box displays the rights a user or group has for a document or folder. When calculating the effective rights for a user or group, inheritance from folders higher in the folder tree is taken into account, as is group membership.

You can also view detailed inheritance information for a specific right. This will display the settings that contributed to determining whether a particular right is granted or denied. For example, if the Read right is allowed for a user because it was explicitly set on the entry, the inheritance information dialog box will indicate that; if it was inherited from higher in the folder tree, the folder on which it was set will be indicated. If a right is denied, the inheritance information will indicate whether it was explicitly denied or inherited a deny (and on what folder the deny was set), or whether the right was simply never granted in the first place. If the user is a member of multiple groups, information for all groups from which they inherit the right will be displayed. In addition, if a right is granted or denied due to multiple settings (for instance, if the Read right was granted both on the entry itself and on its parent folder), all settings will be displayed.

Viewing Effective Rights

To view the effective rights for a specific trustee in the Windows client

  1. Select the entry you want to view rights on, and either right-click or open the Tools menu, and then select Access Rights.
  2. Open the Effective Rights tab, and click Choose.

    Tip: If you want to view the rights for the trustee you are currently logged in as, they will already be displayed by default and you can skip to step 4.

  3. From the Choose Trustee dialog box, select either Repository trustee or Domain account depending on the type of user you want to view effective rights for. For domain accounts, click Browseto open the Select User or Group dialog box.
  4. Review the rights granted to the specified user.
  5. To view more information about inheritance for a specific right, select View detailed inheritance information at the bottom of the dialog box and then select a right. Information as to why a particular right was granted or denied (including folder tree inheritance and group inheritance) will be displayed at the bottom of the dialog box.

To view the effective rights for a specific trustee in the web client

  1. Log in to the web client as a user with the Manage Entry Access privilege.
  2. Select the entry you want to view rights on.
  3. Select More Options, and then Advanced. Under Advanced, select Show Security.
  4. Select the Effective Rights tab.
  5. By default, you will see effective rights for the currently-connected user. To view effective rights for another user, remove Current Connection and add another trustee in the Add trustee option.
  6. Review the rights granted to the specified user.
  7. To view more information about inheritance for a specific right, select View detailed inheritance information at the bottom of the dialog box and then select a right. Information as to why a particular right was granted or denied (including folder tree inheritance and group inheritance) will be displayed at the bottom of the dialog box.