Adding Unlock permission to a specific group doesn't work

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

pnux_

Hello,

I use Nuxeo 10.10 with postgresql 11. I try to add an "unlock" permission to a group named "gestionnaire". User in this group can read write and **unlock ** documents

What i have done :

I deployed a contribution following https://doc.nuxeo.com/nxdoc/1010/how-to-grant-the-edit-permission-without-the-remove-permission/

<component name="fr.my.project.permissions">
	<require>org.nuxeo.runtime.started</require>
	<extension target="org.nuxeo.ecm.core.security.SecurityService" point="permissions">
		<permission name="ReadWriteAndUnlock">
			<include>ReadWrite</include>
			<include>Unlock</include>
		</permission>
	</extension>

	<!-- https://github.com/nuxeo/nuxeo/blob/master/nuxeo-core/nuxeo-core/src/main/resources/OSGI-INF/permissions-contrib.xml -->
	<extension  target="org.nuxeo.ecm.core.security.SecurityService" point="permissionsVisibility">
		<visibility>
			<item order="10" show="true">Read</item>
			<item order="50" denyPermission="Write" show="true">ReadWrite</item>
			<item order="55" denyPermission="Unlock" show="true">ReadWriteAndUnlock</item>
			<item order="100" show="true">Everything</item>
	</extension>
</component>

On repository, i added permissions on the workspace

_What i expect _ :

A user in default "members" group can lock a document he created. (So he can unlock it too) A user in "manager" group can unlock a document locked by a user of "member"s group (because i had unlock permission)

The problem :

A user in "manager" group** can't** unlock a document locked by a user of "member"s group. No unlock button is diplayed in webui.

What did I miss?

Thank you.

2019-09-19 11_20_29-Window.png

Gregory_Carlin

This is probably due to the fact that the element displaying the lock and unlock action is filtering with the "Write" permission: https://github.com/nuxeo/nuxeo-ui-elements/blob/08fd256fb4e7775375c176892098baec21fe302d/actions/nuxeo-lock-toggle-button.html#L133