Summary

This example demonstrates how security can be configured, so that a user will only have access to a single subfolder, even though the parent folder may contain multiple subfolders. The following sample folder structure will be used to illustrate how security can be configured in this fashion.

In this example, there is a group named DEVELOPERS. JOE and JANE are members of this group. Laserfiche security will be configured so that JOE can browse to and open Joe's Folder, but cannot see the existence of Jane's Folder. Similarly, JANE will be allowed to browse to and open Jane's Folder, but will be prevented from seeing Joe's Folder.

To restrict user access to a single subfolder

1. Optional. On the root folder, make sure that the EVERYONE group does not have any rights. This can be performed from the Entry Access dialog box by selecting the EVERYONE group and then clicking Clear All.
2. On the Developer's Folder, add the DEVELOPERS group with the This entry only scope and grant Browse and Read rights. This allows JOE and JANE to see the Developer's Folder and its contents.
3. On the Developer's Folder, add the DEVELOPERS group with the Subfolders and documents only scope and deny all rights. This now prevents JOE and JANE from see the existence of any folders and documents in the Developer's Folder.
4. On Joe's Folder, add the user JOE with the This folder, subfolders and documents scope and allow all rights. This allows JOE to see Joe's Folder and to perform any desired action on it and its contents. This configuration will still prevent JOE from seeing the existence of Jane's Folder.
5. On Jane's Folder, add the user JANE with the This folder, subfolders and documents scope and allow all rights. This allows JANE to see Jane's Folder and to perform desired action on it and its contents. This configuration will still prevent JANE from seeing the existence of Joe's Folder.

Note: By configuring Laserfiche security in this fashion, you will be allowed to add folders to the Developer's Folder and not have to set up security on each user to prevent them from seeing it.