Group page rule priority
added in v3
Joris Samuël Kuiper
For my organization we are using integration with LDAP/AD groups and we encountered the following behaviour: If a user is in group A where there is a deny path starts with rule on path "example" and the user is in a group B that has the inverse of that rule, I want to be able to specify the order such that the rule for group B has priority over group A or the other way.
Nicolas Giard
updated the status to
added in v3
A third state "Force Allow" was added in v3 to override a deny.
T
Thijs Lacquet
I have a similar problem. We have +-40 different groups, with each their own starting path for pages. Named after the group.
One group is allowed to read everything (Board), except a few paths blocked by a deny rule, e.g.
/kasco
But sometimes someone is part of the group Board and part of the group Kasco. And in that case, the deny rule has priority.I would like to set it up such that an accept rule from group A always has priority over a deny rule of group B. I want to have the deny rules only limit the accept rules of the same group.
My current solution is to remove the deny rules, and replace it with an accept with complicated regex to allow everything except certain paths.