Permission inherit on nested passwordlists/folders

[StefanPahrmann]

When creating a nested passwordlist or folder, the permissions from the upper passwordlist is not inherited correctly.

 

We set a securitygroup with "Modify" rights on a list and let users from that list create folders and passwordlists below - but these only apply the creators permission, not for the securitygroup. 

I think i looked through all the settings, but couldn't enforce inheritage. Anything I could try or is it by design?

Build 8983

 

Regards Stefan

[support]

Hi Stefan

 

We have a couple of different permission models in our software.  The standard model is where you set permissions on the Password Lists, and those permissions will be sent up to any Folder.  

 

The second model is called the Propagating permissions model, where you set permissions on the top level folder, and those permissions filter down to all nested Folders and Password Lists.

 

Can you take a look at this video which  explains this in more detail, and hopefully this helps? https://www.youtube.com/watch?v=QBJE_xD185U

 

I think you'll need to convert your Permission Model over to the Propagating permissions Model, but if this doesn't help, please let me know.

 

Regards,

Support

[StefanPahrmann]

Hi, 

We have no top-level-folder, only Passwordlists which have "modfied" access based on AD-groups. When creating a nested passwordlist, I have no option to select another permission model, but maybe I'm missing something?
I don't think the video clarifies it for me ,,

Regards 

Stefan

[support]

Hi Stefan,

 

By default you cannot nest Password Lists beneath other Password Lists - you can only nest Password Lists beneath Folders. There is an option to allow this which can be enabled, but that option is being deprecated in version 9, as it causes confusion like you are seeing.

 

So if you are not using Folders, then you must apply permissions to every single Password List you see in the Passwords Navigation Tree.

I hope this clarifies.

 

**Edit** there is a bulk permissions feature to quickly add permissions to multiple lists at once, found under Administration -> Password List Options.

Regards

Click Studios