Skip to Content

Portal with minimal KM and collaboration permissions for standard users

Hi Experts,

I am looking for a best practice to restrict the KM and collaboration permissions for my portal users to a minimum.

Only reading of some KM documents should be possible (permissions on these folder are already set).

Nothing more especially:

- no KM uploads or creations in any KM folder (not even in userhome/my documents etc.)

- no collaboration rights

- no workflow rights

- no access via KM navigation nor via direct URLs to documents or any of the above services

- only the admins should be able to put new documents into KM

How can I achieve this? I guess deactivating the services from the documents repository is

only a small part of what needs to be done but maybe there are some "big switches"?

Thanks for your help!

Regards Stefan

Add a comment
10|10000 characters needed characters exceeded

Related questions

1 Answer

  • Best Answer
    Posted on Aug 05, 2016 at 08:29 AM

    Hi Stefan,

    This can be controlled by Details-setting-permission and also by service permission for the folder or file will help you to achieve the issue.

    Regards

    Kiruthika

    Add a comment
    10|10000 characters needed characters exceeded

    • Hi Cathal,

      thanks for your ideas. The requirement is that the users can not create any files on the portal, not even in their own user space, as it would be possible to put JavaScript (Cross Site Scripting) or any other harmful code there and send links to this files via email or other means to potential victims.

      So my use case is that we want users to navigate in a custom KM folder including subfolders and access the files within, but not to open any other documents in any other repository nor be able to put files on portal anywhere.

      I wonder that the KM filter (File Extension and Size Filter) where you can limit the upload size and characters that can be used in the filename are minimum 1 KB. So every one can at least upload files up to 1 kilobyte. If this could be set to 0 everything would be fine.

      So as you already mentioned, that I shouldn't set the permissions manually, what I agree to, I will have to disable the whole userhome repository itself. Hope that this is not too problematic.

      Thanks and regards

      Stefan

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.