Hi Nathan,
the deny is handled as a right. If you get that “deny-right” from any of
your memberships, your access will be denied.
If the managers should have nothing from admin but global cats, I
suggest create a small app, containing just the cat files from admin.
Ralf
Nathan Gray schrieb:
I have two groups, Admins and Managers.
Admins is for IT staff, Managers is for department heads.
I want to allow Managers access to the Admin app so they can set site
configuration stuff, categories, lookup values, etc., but I want to
deny access to the Admin section (and more, but I’ll start there).
I’ve edited the group’s ACL rights, and denied access to everything
possible, except Global Categories. I can’t deny ‘Admin queue and
history’ or ‘Remote administration instances’.
The Managers group should be used for mass emails, weekly meetings,
some approvals, etc.
My IT manager, in both groups, gets denied these locations as well.
As near as I can tell, this means eGW uses Allow, Deny rather than
Deny, Allow.
The IT manager doesn’t mind missing out on the emails and meetings, so
he’s currently not in the Managers group, allowing him full Admin
access.
Is there another solution, other than make all the IT staff have
Manager access? We pretty much have the access, but I don’t want the
emails or meetings either.
Nathan Gray
nathan at goarctic dot com
eGroupWare-developers mailing list
eGroupWare-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-developers
–
Ralf Becker
Director Software Development
Stylite GmbH
[open style of IT]
Morschheimer Strasse 15
67292 Kirchheimbolanden
fon +49 (0) 6352 70629-0
fax +49 (0) 6352 70629-30
mailto: rb@stylite.de
www.stylite.de
www.egroupware.org
Geschäftsführer Andre Keller, Nigel John Vickers,
Gudrun K. Müller und Ralf Becker
Registergericht Kaiserslautern HRB 12087
eGroupWare-developers mailing list
eGroupWare-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-developers
