tag:help-archives.hannonhill.com,2010-02-09:/discussions/how-do-i/21077-restrict-access-to-one-folder-in-a-siteCascade CMS: Discussion 2016-01-26T15:57:59Ztag:help-archives.hannonhill.com,2010-02-09:Comment/390048802016-01-25T20:42:19Z2016-01-25T20:42:19Zrestrict access to one folder in a site<div><p>I realize it has something to do with the way we set up user
roles, but when I started working at my university's web
department, they already had a routine in place for adding new
users, which they do exactly the same way for everyone. Thus, I am
not real clear about what the different user roles are, despite
having read the KB info on them.</p>
<p>All of our users outside the web department are given "Manager"
roles for whichever site they belong to. They also all belong to
sitename_adminstrators group since we haven't really done anything
with workflows. (Everyone here seems to hate that word after coming
from another CMS that made it really confusing and difficult.)</p>
<p>I am building small sites for faculty members to house their
CV's, courses, schedules, etc. We are using Bootstrap and have
templates that require custom navigation. I want the faculty
members to be able to add and update pages and folders on their
sites, but I do not want them able to edit the navigation.</p>
<p>We keep all of the navigation blocks in a specific "nav" folder.
Is there a way to restrict access to just this folder so that they
can have free reign of their site without having to worry about
them messing up the navigation? If there is, how do I need to set
up users or modify the roles of existing users?</p></div>Jory Kellertag:help-archives.hannonhill.com,2010-02-09:Comment/390048802016-01-25T20:56:02Z2016-01-25T20:56:02Zrestrict access to one folder in a site<div><p>Hi Jory,</p>
<blockquote>
<p>We keep all of the navigation blocks in a specific "nav" folder.
Is there a way to restrict access to just this folder so that they
can have free reign of their site without having to worry about
them messing up the navigation?</p>
</blockquote>
<p>Yes. You can do this with Access Rights. When you have a moment,
try the following:</p>
<ul>
<li>As an Administrator, navigate to the 'nav' Folder you mentioned
above</li>
<li>Click the <strong>More</strong> tab and then select
<strong>Access</strong></li>
<li>For the <strong>All</strong> field, select 'None'</li>
<li>Then, if you do want to allow a select group of folks to have
read or write access, you can use the additional options seen below
that field (you can add individual users and/or groups with
read/write)</li>
</ul>
<p>Last but not least, you need to make sure that the individuals
accessing the Site have a Site Role that does <strong>not</strong>
allow for them to 'Bypass all permissions checks'.</p>
<p>Let me know if this helps!</p></div>Timtag:help-archives.hannonhill.com,2010-02-09:Comment/390048802016-01-25T21:05:51Z2016-01-25T21:05:51Zrestrict access to one folder in a site<div><p>Tim,</p>
<p>Thanks for the super quick response! I tried what you suggested
and then clicked on "Assume this user's identity" to test it out
and I was still able to edit contents of the folder in question. I
also tried restricting just the nav block and was still able to
edit it after assuming that user's identity.</p>
<p>The only thing I'm not sure about is the last thing you said
about site roles that allow "bypass all permission checks." I'm not
sure how to check that. I did, however, get an error message that
said "You do not have permission..." when I, still assuming her
identity, tried to go back to the Administration - Users page.</p></div>Jory Kellertag:help-archives.hannonhill.com,2010-02-09:Comment/390048802016-01-25T21:09:22Z2016-01-25T21:09:22Zrestrict access to one folder in a site<div><p>Ah, I found it. Ok so, as I mentioned earlier, the new users are
created with the sitename_administrators group and the role:
Manager.</p>
<p>Manager has "bypass all permission checks" disabled. But
sitename_administrators has it enabled.</p>
<p>If I change her to sitename_author will she still be able to
add/edit/publish content?</p></div>Jory Kellertag:help-archives.hannonhill.com,2010-02-09:Comment/390048802016-01-25T21:24:08Z2016-01-25T21:24:08Zrestrict access to one folder in a site<div><p>Ok, I found that, too. Thank you so much for pointing me in the
right direction.</p></div>Jory Kellertag:help-archives.hannonhill.com,2010-02-09:Comment/390048802016-01-25T21:31:49Z2016-01-25T21:31:49Zrestrict access to one folder in a site<div><p>No problem at all! So, it sounds like you were able to get
things working as expected, correct? Just let me know if there are
still any parts to this where you might need help!</p></div>Timtag:help-archives.hannonhill.com,2010-02-09:Comment/390048802016-01-26T15:51:03Z2016-01-26T15:51:03Zrestrict access to one folder in a site<div><p>Well, I was able to find what capabilities each role has. I
think we will need to create a custom role for this purpose, so I
will return and provide an update once we have achieved and tested
that.</p></div>Jory Kellertag:help-archives.hannonhill.com,2010-02-09:Comment/390048802016-01-26T15:57:58Z2016-01-26T15:57:58Zrestrict access to one folder in a site<div><p>Sounds good, Jory. Feel free to comment back here if you end up
having any additional questions. Thanks!</p></div>Tim