Regarding Access Control

Parasmoni

I wonder if it is possible to create Access Roles in a manner so that a user can edit only a specific collection of objects, and can not change objects of other collections?

darrigan

Hi,

when you edit a Collection, go to Access in the left menu, between Summary and Log. There, you have access control and you can give some rights to a specific group, or user.

Parasmoni

Hi darrigan , here is my screenshot of collection-editing page. I could find nothing between Summary and Log on the left panel.

darrigan

Oh! Yes, you have to activate this function to use it.

In the app.conf, go to this part:

# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#                                   _____           _            _ 
#     /\                          / ____|         | |          | |
#    / \  ___ ___ ___ ___ ___ | |    ___ _ __ | |_ _ __ ___ | |
#   / /\ \ / __/ __/ _ \/ __/ __| | |   / _ \| '_ \| __| '__/ _ \| |
#  / ____ \ (_| (_| __/\__ \__ \ | |___| (_) | | | | |_| | | (_) | |
# /_/   \_\___\___\___||___/___/ \_____\___/|_| |_|\__|_| \___/|_|
#                                                                   
# Structural mechanisms that control who can see what, and how (optional).
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~                          

Set this variable to 1:

# -------------------------
# Item-level access control
# -------------------------
perform_item_level_access_checking = 1

And:

ca_collections_acl_inherit_from_parent_default = 1
ca_objects_acl_inherit_from_ca_collections_default = 1
ca_objects_acl_inherit_from_parent_default = 1

And:

ca_objects_access_inheritance_default = 1

Parasmoni

Thank you very much darrigan , it has worked now.