4 Replies Latest reply on Feb 5, 2019 8:36 AM by Bill Robinson

Missing authorizations when creating an ACL policy

Gerardo Bartoccini Feb 1, 2019 8:21 AM

Hi,

we are trying to create an ACL policy, but we're experiencing a weird issue.

This specific ACL policy will have to be used by a role with a subset of BLAdmins privileges.

For instance, about JobFolder, this role will be able to do pretty much everything except ACL stuff.

So what we planned is to create an authorization profile with the following authorizations:

Authorization profile gets created properly:

However, when we assign the above authorization profile to an ACL policy, the "JobFolder.Create" permission disappears.

We noticed that JobFolder.Create authorization is not available when createing an ACL policy even when selecting single authorizations:

Any hints?

1. Re: Missing authorizations when creating an ACL policy

Bill Robinson Feb 1, 2019 8:47 AM (in response to Gerardo Bartoccini)

create is only something you can grant to a role. it doesn't get granted to objects. so it doesn't need to be in the acl policy.
Like Show 0 Likes(0)

Actions
2. Re: Missing authorizations when creating an ACL policy

Gerardo Bartoccini Feb 5, 2019 8:22 AM (in response to Bill Robinson)

Ok. So how can I allow a role the ability to create a, say, job folder inside a folder managed by BLAdmins?

Example: under /Jobs, a BLAdmins user creates a folder called Admins1, and then we want to enable Admins1 users to create objects and folders under that path. How can we achieve this?
Like Show 0 Likes(0)

Actions
3. Re: Missing authorizations when creating an ACL policy

Gerardo Bartoccini Feb 5, 2019 8:31 AM (in response to Gerardo Bartoccini)

I got your point. Create authorization is not needed. Thanks for your help
Like Show 0 Likes(0)

Actions
4. Re: Missing authorizations when creating an ACL policy

Bill Robinson Feb 5, 2019 8:36 AM (in response to Gerardo Bartoccini)

you would grant the create to the role as well as read and write. then on the parent folder you would grant read and write. i don't think you need modify on the role/parent to create.
Like Show 0 Likes(0)

Actions

Communities