Bentley Communities
Bentley Communities
  • Site
  • User
  • Site
  • Search
  • User
ProjectWise
  • Product Communities
ProjectWise
ProjectWise Design Integration Forum Is it possible to disable folder security inheritance for a specific group?
    • Sign In

    • State Suggested Answer
    • +1 person also asked this people also asked this
    • Replies 5 replies
    • Answers 1 answer
    • Subscribers 64 subscribers
    • Views 1034 views
    • Users 0 members are here

    Is it possible to disable folder security inheritance for a specific group?

    Lonnie Frater
    Offline Lonnie Frater over 1 year ago

    Hi,

    We have a number of confidential project folders. I would like to apply specific folder permissions to a group applied to a sub folder and disable the inheritance for this user, if this possible?

    So for example like this -

    Parent folder

       Administrator - All permissions

       Conf - Read/Write

       Accounts - Read only

          Sub folder A

              Administrator - All permissions

              Conf - Read/Write

              Accounts - Read only

                  Sub folder B

                      Administrator - All permissions

                      Conf - Read/Write

                      Account - Deny

    So Ideally disable the inheritance on Sub folder A, Accounts Group. So any changes made to Parent folder permissions do no overwrite the individual permissions set on Sub folder A. I appreciate I can manually go through and do this, however I wish to apply it to a template and create projects from it and there will always be tweaks/additions required to new project so permissions are lost.

    We have the same issue when providing contractors access to a certain folder buried somewhere, the permissions above are changed for some reason and without realizing the individually applied permission on sub folder below i.e. the contractors permission are changed.

    Thanks in advance for any suggestions

    • Sign in to reply
    • Cancel
    Parents
    • Kevin van Haaren
      0 Offline Kevin van Haaren Sat, Jun 25 2022 10:45 PM

      You can't break inheritance on a folder for a single group, you break for all groups on the folder, and sub-folders to that folder (so you need to also break inheritance on Sub Folder B or it will inherit from Sub Folder A). When you break inheritance on Sub Folder A, if you make a change to Conf permissions on parent folder that also will not copy to Sub Folder A (or B).

      Assuming you're OK with that, how are you copying your template? As long as I have "Copy Access Control" turned on it keeps the broken inheritance from our templates.

      For drag & drop of a Work Area you should get a pop-up with an Advanced tab that has Copy Access Control.

      If you're using the "New Work Area" flow then the 2nd step of the process also has an Advanced tab with that option.

      I did run into an issue with PowerShell and Copy-PWFolder where I had to re-break inheritance then apply the security I wanted, but since it was scripted didn't really matter since I wasn't redoing it by hand. If you're using powershell I can post how i did this.

       

      • Cancel
      • Vote Up 0 Vote Down
      • Sign in to reply
      • Verify Answer
      • Cancel
    Reply
    • Kevin van Haaren
      0 Offline Kevin van Haaren Sat, Jun 25 2022 10:45 PM

      You can't break inheritance on a folder for a single group, you break for all groups on the folder, and sub-folders to that folder (so you need to also break inheritance on Sub Folder B or it will inherit from Sub Folder A). When you break inheritance on Sub Folder A, if you make a change to Conf permissions on parent folder that also will not copy to Sub Folder A (or B).

      Assuming you're OK with that, how are you copying your template? As long as I have "Copy Access Control" turned on it keeps the broken inheritance from our templates.

      For drag & drop of a Work Area you should get a pop-up with an Advanced tab that has Copy Access Control.

      If you're using the "New Work Area" flow then the 2nd step of the process also has an Advanced tab with that option.

      I did run into an issue with PowerShell and Copy-PWFolder where I had to re-break inheritance then apply the security I wanted, but since it was scripted didn't really matter since I wasn't redoing it by hand. If you're using powershell I can post how i did this.

       

      • Cancel
      • Vote Up 0 Vote Down
      • Sign in to reply
      • Verify Answer
      • Cancel
    Children
    No Data

    Communities
    • Home
    • Getting Started
    • Community Central
    • Products
    • Support
    • Secure File Upload
    • Feedback
    Support and Services
    • Home
    • Product Support
    • Downloads
    • Subscription Services Portal
    Training and Learning
    • Home
    • About Bentley Institute
    • My Learning History
    • Reference Books
    Social Media
    •    LinkedIn
    •    Facebook
    •    Twitter
    •    YouTube
    •    RSS Feed
    •    Email

    © 2023 Bentley Systems, Incorporated  |  Contact Us  |  Privacy |  Terms of Use  |  Cookies