Permission role - Create and Modify

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

rluberti

Hi,

I was able to create a new role that can only read and modify content…..but
I couldn't create a role that can only read and create content …
I tried in this way:

permissionDefinition.xml:

<permissionSet type="cm:cmobject" expose="selected">

     <!– A Depositor can only read/create content –>

      <permissionGroup name="Depositor" allowFullControl="false" expose="true" >

           <includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/>

           <includePermissionGroup type="sys:base" permissionGroup="ReadChildren"/>

           <includePermissionGroup type="sys:base" permissionGroup="ReadContent"/>

           <includePermissionGroup type="sys:base" permissionGroup="CreateChildren"/>

           <includePermissionGroup type="sys:base" permissionGroup="LinkChildren"/>
      </permissionGroup>
  </permissionSet>

  <permissionSet type="cm:content" expose="selected">



      <permissionGroup name="Depositor" extends="true" expose="true"/>

   </permissionSet>

   <!– Admin can do anything to any ndoe                                                –>

   <globalPermission permission="FullControl" authority="ROLE_ADMINISTRATOR"/>

   

   <!– For now, owners can always see, find and manipulate their stuff                  –>

<!–   <globalPermission permission="FullControl" authority="ROLE_OWNER"/>–>

   

   <!– Unlock is granted to the lock owner                                              –>

   <globalPermission permission="Unlock" authority="ROLE_LOCK_OWNER"/>

   

   <!– Check in is granted to the lock owner                                            –>

   <globalPermission permission="CheckIn" authority="ROLE_LOCK_OWNER"/>

   

   <!– Cancel check out is granted to the locak owner                                   –>

   <globalPermission permission="CancelCheckOut" authority="ROLE_LOCK_OWNER"/>


‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I see the menu action "Create content" but using it I get :
"A system error happened during the operation: Access Denied. You do not have the appropriate permissions to perform this operation."

Can I actually have "create content" permissions without "modify permissions" ?

thanks in advance

Roberto

andy

Hi

I think you have no permissions on the thing you are trying to create as you have removed the owner permission. So you can not edit it after creation - which the UI may be doing.

When does the error occur?

Turn on auditing and you should be able to find out what failed.

Andy