|
Home > Archive > Microsoft Content Management Server > December 2006 > Clarification on User Roles, Please
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Clarification on User Roles, Please
|
|
| kckriegs_33@yahoo.com 2006-12-08, 1:17 pm |
| Hi Stefan,
We have set up an editorial environment where various groups can create
& publish postings. Say the root channel is tax.com, and there's a sub
channel tax.com/Research.
We have set up a "Research Editors" group within the Editors user role,
where the group only has access to the /Research sub channel.
Is there a way for members of the Research Editors group to view other
portions of the site? I.E., make sections of the site other than
/Research read-only for this group? If so, would it be simple or would
it require significant customization?
Thanks,
Karl
| |
| Stefan Goßner [MSFT] 2006-12-08, 1:17 pm |
| Hi Karl,
you need to create a subscriber group and add the same users or AD groups to
it.
Then assign this subscriber group to the other portions of the site.
As you should not assign individual users to rights groups anyway but NT or
AD groups this would mean just assign the same AD/NT group to the
subscriber group and you are done.
Now you can maintain these users by just adding or removing the users to the
NT/AD group.
Cheers,
Stefan
<kckriegs_33@yahoo.com> wrote in message
news:1165591341.213162.122870@n67g2000cwd.googlegroups.com...
> Hi Stefan,
>
> We have set up an editorial environment where various groups can create
> & publish postings. Say the root channel is tax.com, and there's a sub
> channel tax.com/Research.
>
> We have set up a "Research Editors" group within the Editors user role,
> where the group only has access to the /Research sub channel.
>
> Is there a way for members of the Research Editors group to view other
> portions of the site? I.E., make sections of the site other than
> /Research read-only for this group? If so, would it be simple or would
> it require significant customization?
>
> Thanks,
> Karl
>
| |
| kckriegs_33@yahoo.com 2006-12-08, 1:17 pm |
| That makes sense.
So, for any editors rights group with access to less than the whole
site, if we want the associated nt groups to have the ability to
navigate the site, we throw that group into the subscribers rights
group.
Then, regarding the subscribers rights group. Can we just give that
group rights to everything, or do we need to give it rights to
(everything - Research). I.E., does an NT Group's inclusion as a
subscriber trump the edit rights, or vice versa?
Stefan Go=DFner [MSFT] wrote:
> Hi Karl,
>
> you need to create a subscriber group and add the same users or AD groups=
to
> it.
> Then assign this subscriber group to the other portions of the site.
>
> As you should not assign individual users to rights groups anyway but NT =
or
> AD groups this would mean just assign the same AD/NT group to the
> subscriber group and you are done.
> Now you can maintain these users by just adding or removing the users to =
the[vbcol=seagreen]
> NT/AD group.
>
> Cheers,
> Stefan
>
> <kckriegs_33@yahoo.com> wrote in message
> news:1165591341.213162.122870@n67g2000cwd.googlegroups.com...
| |
| Stefan Goßner [MSFT] 2006-12-08, 1:17 pm |
| Hi Karl,
just give it rights to everything.
No need to exclude Research.
The higher right will win automatically.
Cheers,
Stefan
<kckriegs_33@yahoo.com> wrote in message
news:1165593141.452230.160420@j72g2000cwa.googlegroups.com...
That makes sense.
So, for any editors rights group with access to less than the whole
site, if we want the associated nt groups to have the ability to
navigate the site, we throw that group into the subscribers rights
group.
Then, regarding the subscribers rights group. Can we just give that
group rights to everything, or do we need to give it rights to
(everything - Research). I.E., does an NT Group's inclusion as a
subscriber trump the edit rights, or vice versa?
Stefan Goßner [MSFT] wrote:[vbcol=seagreen]
> Hi Karl,
>
> you need to create a subscriber group and add the same users or AD groups
> to
> it.
> Then assign this subscriber group to the other portions of the site.
>
> As you should not assign individual users to rights groups anyway but NT
> or
> AD groups this would mean just assign the same AD/NT group to the
> subscriber group and you are done.
> Now you can maintain these users by just adding or removing the users to
> the
> NT/AD group.
>
> Cheers,
> Stefan
>
> <kckriegs_33@yahoo.com> wrote in message
> news:1165591341.213162.122870@n67g2000cwd.googlegroups.com...
| |
| kckriegs_33@yahoo.com 2006-12-08, 1:17 pm |
| NICE. That's what I'm talking about, Stefan!
One last question: In production, do I need to configure a rights group
for the Subscribers role? We'll be allowing guest access so users won't
have to enter uid/pw. So is an AD/NT/CMS rights group necessary?
Stefan Go=DFner [MSFT] wrote:[vbcol=seagreen]
> Hi Karl,
>
> just give it rights to everything.
> No need to exclude Research.
> The higher right will win automatically.
>
> Cheers,
> Stefan
>
> <kckriegs_33@yahoo.com> wrote in message
> news:1165593141.452230.160420@j72g2000cwa.googlegroups.com...
> That makes sense.
>
> So, for any editors rights group with access to less than the whole
> site, if we want the associated nt groups to have the ability to
> navigate the site, we throw that group into the subscribers rights
> group.
>
> Then, regarding the subscribers rights group. Can we just give that
> group rights to everything, or do we need to give it rights to
> (everything - Research). I.E., does an NT Group's inclusion as a
> subscriber trump the edit rights, or vice versa?
>
>
> Stefan Go=DFner [MSFT] wrote:
ps[vbcol=seagreen]
te[vbcol=seagreen]
e,[vbcol=seagreen]
| |
| Stefan Goßner [MSFT] 2006-12-08, 1:17 pm |
| Hi,
a subscriber rights group for the guest account is necessary.
You need to
- enable guest access in the SCA
- configure a user account to be used for guests
- add this user account to a subscriber rights group
- assign this rights group to all channels, resource galleries, template
galleries
guests should be able to see.
Cheers,
Stefan
<kckriegs_33@yahoo.com> wrote in message
news:1165597981.833769.24090@73g2000cwn.googlegroups.com...
NICE. That's what I'm talking about, Stefan!
One last question: In production, do I need to configure a rights group
for the Subscribers role? We'll be allowing guest access so users won't
have to enter uid/pw. So is an AD/NT/CMS rights group necessary?
Stefan Goßner [MSFT] wrote:[vbcol=seagreen]
> Hi Karl,
>
> just give it rights to everything.
> No need to exclude Research.
> The higher right will win automatically.
>
> Cheers,
> Stefan
>
> <kckriegs_33@yahoo.com> wrote in message
> news:1165593141.452230.160420@j72g2000cwa.googlegroups.com...
> That makes sense.
>
> So, for any editors rights group with access to less than the whole
> site, if we want the associated nt groups to have the ability to
> navigate the site, we throw that group into the subscribers rights
> group.
>
> Then, regarding the subscribers rights group. Can we just give that
> group rights to everything, or do we need to give it rights to
> (everything - Research). I.E., does an NT Group's inclusion as a
> subscriber trump the edit rights, or vice versa?
>
>
> Stefan Goßner [MSFT] wrote:
|
|
|
|
|