User Guide

Table Of Contents
20 Chapter 1: About Permissions
If you need to set up exceptions such as denying access to certain folders for a specific user, you
can assign a user-based permission setting that takes precedence over the group permission,
ensuring that access is prevented. User-assigned permissions always take precedence over group-
assigned permissions (except for members of the Account Administrators group).
Note: To change permissions on a folder, you must open the folder before setting permissions.
For detailed steps on setting permissions for files and folders in the Content Library, see “Setting
custom permissions for content files” on page 54 and “Setting content folder permissions
on page 58.
For detailed steps on setting permissions for folders in the Course Library, see “Setting course
folder permissions” on page 84.
For detailed steps on setting permissions for folders in the Meeting Library, see “Setting meeting
folder permissions” on page 110.
About multiple permissions precedence
If a user belongs to one or more groups, it is possible that multiple permissions apply to a single
file or folder. In such a case, the user’s permissions are resolved as follows (higher-numbered steps
take precedence):
1.
If the user acquires View, Publish, or Manage permissions through group-acquired permissions,
then the permission granting the greatest access to features applies. These three group
permissions are additive.
2.
If the user acquires any Access Denied permission through group-acquired permissions, then all
group-acquired View, Publish, or Manage permissions are removed and the user is not allowed
access.
3.
If the user acquires View, Publish, or Manage permissions through user-specific permissions,
these are additive to the corresponding group-acquired permissions. In addition, these override
any group-acquired Access Denied permission.
4.
If the user is specifically assigned the Access Denied permission setting through user-specific
permissions, then the user is denied access regardless of any group-acquired permissions.
5.
If the user is a member of the Account Administrator group, then the account administrators
permission applies regardless of any other individual or group setting.
6.
If there are no permissions applied by either user or group (and none is inherited from a parent
folder), then the user cannot access or perform any actions on the folder or file.
The following table illustrates the way that group and user permissions apply.
Group G1
permissions
Group G2
permissions
Union (G1, G2)
permissions
User permissions Resulting
permissions
View Publish Publish Manage Publish+Manage
Manage None Manage Publish Publish+Manage
Access Denied Publish Access Denied Manage Manage