Bentley Communities
Bentley Communities
  • Site
  • User
  • Site
  • Search
  • User
ProjectWise
  • Product Communities
ProjectWise
ProjectWise Design Integration Forum Is it possible to disable folder security inheritance for a specific group?
    • Sign In

    • State Suggested Answer
    • +1 person also asked this people also asked this
    • Replies 5 replies
    • Answers 1 answer
    • Subscribers 63 subscribers
    • Views 959 views
    • Users 0 members are here

    Is it possible to disable folder security inheritance for a specific group?

    Lonnie Frater
    Offline Lonnie Frater over 1 year ago

    Hi,

    We have a number of confidential project folders. I would like to apply specific folder permissions to a group applied to a sub folder and disable the inheritance for this user, if this possible?

    So for example like this -

    Parent folder

       Administrator - All permissions

       Conf - Read/Write

       Accounts - Read only

          Sub folder A

              Administrator - All permissions

              Conf - Read/Write

              Accounts - Read only

                  Sub folder B

                      Administrator - All permissions

                      Conf - Read/Write

                      Account - Deny

    So Ideally disable the inheritance on Sub folder A, Accounts Group. So any changes made to Parent folder permissions do no overwrite the individual permissions set on Sub folder A. I appreciate I can manually go through and do this, however I wish to apply it to a template and create projects from it and there will always be tweaks/additions required to new project so permissions are lost.

    We have the same issue when providing contractors access to a certain folder buried somewhere, the permissions above are changed for some reason and without realizing the individually applied permission on sub folder below i.e. the contractors permission are changed.

    Thanks in advance for any suggestions

    • Sign in to reply
    • Cancel
    • Dan Dimitro
      0 Offline Dan Dimitro Fri, Jun 10 2022 8:17 AM

      You should be able to do this by setting specific Document and Workflow access control for the folders and/or roles for groups the users are members of. In short, yes, you can break inheritance. 

      communities.bentley.com/.../access-rights-inheritance-explanation

      • Cancel
      • Vote Up 0 Vote Down
      • Sign in to reply
      • Verify Answer
      • Reject Answer
      • Cancel
    • Lonnie Frater
      0 Offline Lonnie Frater Tue, Jun 14 2022 9:23 PM

      Hi Dan,

      Thanks for taking the time to reply. 

      I appreciate you can 'break inheritance', however I was trying to Template a folder structure with inheritance disabled on some folder. When you apply this template to a new folder structure the disabled inheritance is lost and you have to recreate it all manually.

      If there is a solution for this it would be appreciated.

      • Cancel
      • Vote Up 0 Vote Down
      • Sign in to reply
      • Verify Answer
      • Cancel
    • Madhuri Londhe
      0 Offline Madhuri Londhe Fri, Jun 24 2022 2:07 AM in reply to Lonnie Frater

      Hi Lonnie,

      Check ACL excel import functionality to avoid manual work.

      • Cancel
      • Vote Up 0 Vote Down
      • Sign in to reply
      • Verify Answer
      • Cancel
    • Kevin van Haaren
      0 Offline Kevin van Haaren Sat, Jun 25 2022 10:45 PM

      You can't break inheritance on a folder for a single group, you break for all groups on the folder, and sub-folders to that folder (so you need to also break inheritance on Sub Folder B or it will inherit from Sub Folder A). When you break inheritance on Sub Folder A, if you make a change to Conf permissions on parent folder that also will not copy to Sub Folder A (or B).

      Assuming you're OK with that, how are you copying your template? As long as I have "Copy Access Control" turned on it keeps the broken inheritance from our templates.

      For drag & drop of a Work Area you should get a pop-up with an Advanced tab that has Copy Access Control.

      If you're using the "New Work Area" flow then the 2nd step of the process also has an Advanced tab with that option.

      I did run into an issue with PowerShell and Copy-PWFolder where I had to re-break inheritance then apply the security I wanted, but since it was scripted didn't really matter since I wasn't redoing it by hand. If you're using powershell I can post how i did this.

       

      • Cancel
      • Vote Up 0 Vote Down
      • Sign in to reply
      • Verify Answer
      • Cancel
    • Lonnie Frater
      0 Offline Lonnie Frater Wed, Jun 29 2022 1:49 AM

      Thank you Kevin and Madhuri,

      Did not have a lot of success previously with maintaining permissions from template, but will have to do further testing, maybe I am missing something.

      Most often always creating for "New Work Area"

      • Cancel
      • Vote Up 0 Vote Down
      • Sign in to reply
      • Verify Answer
      • Cancel

    Communities
    • Home
    • Getting Started
    • Community Central
    • Products
    • Support
    • Secure File Upload
    • Feedback
    Support and Services
    • Home
    • Product Support
    • Downloads
    • Subscription Services Portal
    Training and Learning
    • Home
    • About Bentley Institute
    • My Learning History
    • Reference Books
    Social Media
    •    LinkedIn
    •    Facebook
    •    Twitter
    •    YouTube
    •    RSS Feed
    •    Email

    © 2023 Bentley Systems, Incorporated  |  Contact Us  |  Privacy |  Terms of Use  |  Cookies