nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

"Can ask for publishing" permission has no effect

arubiom00_

Steps to reproduce the error using Nuxeo 5.9.5 virtual machine:

Create a new user
Create a new section. Assign to the previous user the read permission and deny "Can ask for publishing" permission.
Log in as the created user, create a document and publish it in the section.

Is there a way to enable users to see a section without being able to publish in it?

Thanks in advance. Regards.

Find more posts tagged with

Comments

Florent_Guillau

This is expected, as Read includes CanAskForPublishing and if you allow Read before denying CanAskForPublishing then the deny won't matter.

Note that this changed for Nuxeo 6.0 (NXP-15563).

arubiom00_

Hi Florent,

Florent_Guillau

The order in which you do 2. and 3. in the UI doesn't matter, in both cases from this screen Nuxeo will write the resulting ACL with the grants before the denies, so the granting of Read will come before the denying of CanAskForPublishing. Try with two levels of sections, doing the deny at one level and the grant in a subsection. Or use Java code or Automation to write a more fine-grained ACL on the object than what the UI does.