Subfolder acces control

[Dmi3U]

Hi All!

I was trying to figure out why my users could modify library objects even though they are supposed to be guests there. What I found was every time I had a subfolder in the library the access was not inherited from the upper level, it was set to the default access setings which added a All Participating Members group, which in-turngranted create, create by move and modify permissions.

I have3 questions:

Is there a global settingfor subfolders to inherit permissions fromtop level?

Is it different in Library vs Product?

How do I remove All Participating Members from all my subfolders in the Library?

WC 9.1 m040.

Dmitry

[cc-2]

Hello

to my knowledge there is no difference between Product and Library. It is all controled in the domain policy.

We have different access permissions for subfolder. We manage this by having different domain that we apply to each folder.

In the domain policy you can control which user group or role will have which permissions for each object and for which state.

By default the access permission is applied at the top level and goes down if nothing is done to change it. Out of the box the access permissions are quite generous . For our first implementation we removed most of them at the top level and then created several domain policies we then applied to each folder (subfolder). That way we know exactly what permissions people have

I did not want to give too much details here. Hope this help, otherwise let me know.

Thanks

best regards

[rjessen]

If you want more detailed information on how Folder Access Control can be implemented in Windchill, you can read the presentation I gave at the most recent PTC/User conference: