In my database I have a view in an outline.When I give rights of an Author with no rights to create or delete documents these users still can do it.
What can be wrong? Does it matter that they have replication rights?
Subject: Users with no right to delete still can do it
If a user makes a local replica and does not copy the acl and ‘enforce consistent acl …’ is not set and they then delete documents from that local replica the deletions should not replicate back as they are not allowed to delete documents from the server replica.
Are you absolutely sure they are really deleting documents?
Subject: RE: Users with no right to delete still can do it
Yes I’m sure. I’ve done it myself under the user’s ID.I pressed delete in a view and while leaving the database LN asked me whether I wanted to delete the document. I confirmed and when opened the db again the doc was gone.
Subject: RE: Users with no right to delete still can do it
Hi Lukasz
I have always found that ACL problems are down to an error/oversight on my part and that the settings chosen apply.
How are ACL rights being assigned? Using groups? Do users appear in more than one group? In this case, the least restrictive rights apply.
John
Subject: RE: Users with no right to delete still can do it
The rights are given to a specific user only.I found that effective rights give the user Admin rights (even if he’s only an author).
I don’t know why (the user doesn’t have any roles and isn’t a member of any group) - the other users (managers) don’t have that right…
Maybe it’s the domain?
And one more thing - the db is on a local drive.
Subject: RE: Users with no right to delete still can do it
Almost 2 years on but…
DB being on a local drive is your problem. Unless you have the “Enforce a consistent Access Control List…” box checked on the advanced tab of the ACL dialog anyone who can access the DB locally gets manager access.