This is the current situation.
Sources
- Context: web
-- Resource document, general page (root-level)
-- Resource document, 'topic-category' (root-level)
--- Resource document, 'company 1'
--- Resource document, 'company 2'
--- Resource document, 'company 3'
-- Resource document, 'topic-category' (root-level)
--- Resource document, 'company 4'
--- Resource document, 'company 5'
--- Resource document, 'company 6'
general page is placed in Resource Group called 'Admin-resources'
topic-category is placed in Resource Group called 'Category-resources'
company 1-6 are placed in Resource Group called 'Company-resources'
User Group 'Company-member' has access to:
- Company-resources with access policy 'Resource', context 'mgr'
- Category-resource with custom access policy permissions 'list' and 'load', context 'mgr'
A user in the User Group 'Company-member' can view the resource document content of a topic-categorie on root-level. They must have only access to the child resources (company-profile).
[ed. note: last edited this post 10 years, 7 months ago.]