Granting Folder-Level Access Rights

This topic presents the guidelines for granting folder-level access rights.

Folder-Level Access Rights Overview

Setting access rights at the folder level is usually done when you want to allow certain groups (but not other groups) to access a particular branch of the folder hierarchy. For example, you may want only the Writers group to be able to access the branch that has User Manual as its root folder.

Setting access rights at the folder and the item levels has more consequences than setting rights at higher levels. When a child view is derived from a parent view, as all reference and most branching views are, it initially contains objects that belong to its parent. In branching views, these objects can branch into new objects that exist only in the child view. Just as a new view has no view-level access rights, folders and items that branch into new objects initially have no access rights at the folder or item level.

This Folder and Child Folder Nodes

The folder level has two nodes: This Folder, for the selected folder, and Child Folders, for the other folders in the folder hierarchy of the branch. This feature allows you to set different access rights for each node.

In the client, the root folder of a view can be indistinguishable from that view. If the view is the root (or initial) view of a project, the root folder can be indistinguishable from that project.

Using the This Folder node to set access rights for the root folder can therefore affect a user’s access to a view. If the view is the root view, it can also affect the user’s access to the project. Therefore, most administrators avoid setting folder-level access rights on a root folder, as these rights may interfere with view-level or project-level rights.

For example, suppose the Developers group is not granted the right to see the User Manual folder and that this folder is the root of a reference view. Then members of the Developers group cannot open that view, even if view-level access rights allow them to see the view. An error message appears when they try to open the view. Users who can see a project but not its root view also see an error message.

Access Rights of Child Views If a child view includes child folders that have access rights in the parent view, its access rights depend upon whether it is a reference view or a branching view.
Access Rights in a Reference View

The access rights in a reference view at the folder level are not independent of the access rights at the folder level in the parent view, as no branching will ever occur. You can see these access rights from either view if you have the rights to do so.

If you change access rights in the reference view, you simultaneously change the access rights in the parent view (and vice versa) because the folder in the reference view is the same object as the folder in the parent view.

Access Rights in a Branching View

If the child view is a branching view, the access rights in the child view at the folder level are independent of the access rights at the folder level in the parent view, but only after the folder in the branching view actually branches.

Initially, any folder you see in the branching view is the same object that exists in the parent view. Therefore, it has the same access rights in both views. Initially, you can change access rights in the parent view (and vice versa), because the folder in the branching view is the same object as the folder in the parent view. Once the folder branches, however, a new object for that folder is created in the branching view. This object begins a life cycle of its own and no longer has any access rights at the folder level.

Note: Remember that branching a folder does not branch any of the folder’s contents. Each item is the folder is treated separately.

The behavior of folders in a branching view affects the access rights:

  • If a folder branches on change and you change one of its properties, its revision number changes. When the folder branches, it becomes a new object in the repository and no longer has any access rights at the folder level.
  • If a folder does not branch on change and you change one of its properties, the revision number changes, but no new object is created. In this case, the folder retains its access rights in both views. Because both views still contain the same object, changes you make to the folder’s access rights in one view also change that folder’s access rights in the other view.

Back to top

Folder Access Rights

When you select the Folder Tree > Advanced > Access Rights command to display the Folder Access Rights dialog box, you see two folder nodes. The rights available from This Folder node apply to the selected folder only. The rights available from the Child Folders node apply to all the child folders of the selected folder. The dialog and following table refer to the current folder. The table describes the access rights that are available from the This Folder node in the Folder Access Rights dialog box.

Note: Because This Folder has no Generic item container subcategory for access rights, container rights for This Folder are on its Child Folders node. If This Folder is the root folder, these rights are set on the Child Folders node of the View Access Rights dialog box.

Generic object rights

See item and its properties

View this folder’s Name, Exclude, and Files tabs, which become available when Folder > Properties is selected. The History tab is controlled by the See folder history access right. The Link tab is controlled by the See folder links access right.

Modify properties

Change folder properties on the folder Name and Exclude tabs. Properties include folder name, description, use of inherited and local exclude lists, and contents of the local exclude list. If the folder is not a root folder, the working folder and alternate working folder settings are also properties. For root folders, the working folders are view properties and not controlled by this access right.

Delete from folder

Delete this folder from its parent folder. Be aware that if you can delete any of this folder’s parent folders, you can still delete this folder.

Change item access rights

Change the access rights for this folder. If you change this setting, be sure that you remain one of the users who can change access rights.

See history

See this folder’s History tab, which is available when Folder > Properties is selected.

Perform maintenance

Change the revision comments for past revisions.

Set exclusive locks

Lock folders exclusively.

Break exclusive locks

Remove someone else’s exclusive lock on the folders.

Label Rights

Attach/Adjust view labels

Add a view label to this folder. Move a view label from one revision of this folder to another. This right controls direct manipulation of labels for this folder at the folder level. It does not stop users from attaching a view label to this folder when a view label is created.

Detach view labels

Remove a view label from this folder. Be aware that if users can delete view labels, they can detach a view label from this folder by deleting the view label from the view, regardless of the setting for this right.

Attach/Adjust revision labels

Add a revision label to this folder. Move a revision label from one revision of this folder to another. This right controls direct manipulation of revision labels for this folder at the folder level.

Detach revision labels

Remove a revision label from this folder. Be aware that if users can delete revision labels, they can detach a revision label from this folder by deleting the revision label from the view, regardless of the setting for this right.

Link Rights

See links

See the links involving this folder.

Create links

Link this folder to other folders and items.

Modify links

Change a link for this folder.

Delete links

Delete a link for this folder.

Back to top

Child Folder Access Rights

When you select the Child Folders node from the Folder Access Rights dialog box, the available rights apply to the child folders of the selected folder. The Child Folders node is also available from the View Access Rights dialog box and the Project Access Rights dialog box. In these cases, the rights apply to all child folders in the current view or all the child folders in the project, respectively.

Below is a description of the access rights available from the Child Folders nodes in the Project Access Rights, View Access Rights, or Folder Access Rights dialog boxes.

Generic item rights

See item and its properties

See the selected folder’s child folders or the selected project’s or view’s folders in the folder hierarchy in the left pane on the screen. You can also view the Name and Exclude Properties dialogs, which open when Folder > Properties is selected. The History tab is controlled by the See folder history access right.

Modify properties

Change folder properties on the Name and Exclude tabs for child folders. The properties include the folder’s name, description, use of inherited and local exclude lists, and the contents of the local exclude list. If a child folder is not a root folder, the working folder and alternate working folder settings are folder properties. If it is the root folder, the working folders are view properties and not controlled by this access right.

Delete from folder

Delete the selected folder’s child folders or the selected project’s or view’s folders from their parent folders. Be aware that if you can delete any of this folder’s parent folders, you can still delete this folder.

Change item access rights

Change the access rights for the selected folder’s child folders or the selected project’s or view’s folders. If you change this setting, be sure that you remain one of the users who can change access rights.

See history

See the History tab, which is available when Folder > Properties is selected. This action applies to the selected folder’s child folders or the selected project’s or view’s folders.

Perform maintenance

Change the revision comments for past revisions.

Set exclusive locks

Lock child folders exclusively.

Break exclusive locks

Remove someone else’s exclusive lock on the child folders.

Label rights

Attach/Adjust view labels

Add a view label to the selected folder’s child folders or the selected project‘s or view’s folders. Move a view label from one revision of a child folder to another. This right controls direct manipulation of view labels for child folders at the folder level. It does not stop users from attaching a view label to child folders when a view label is created.

Detach view labels

Remove a view label from the selected folder’s child folders or the selected project’s or view’s folders. Be aware that if users can delete view labels, they can detach a view label from child folders by deleting the view label from the view, regardless of the setting of this right.

Attach/Adjust revision labels

Add a revision label to the selected folder’s child folders or the selected project’s or view’s folders. Move a revision label from one revision of a child folder to another. This right controls direct manipulation of revision labels for child folders at the folder level.

Detach revision labels

Remove a revision label from the selected folder’s child folders or the selected project’s or view’s folders. Be aware that if users can delete revision labels, they can detach a revision label from this folder by deleting the revision label from the view, regardless of the setting of this right.

Link rights

See links

See the links involving the selected folder’s child folders or the selected project’s or view’s folders.

Create links

Link the selected folder’s child folders or the selected project’s or view’s folders to other folders and items.

Modify links

Change a link for the selected folder’s child folders or the selected project‘s or view’s folders.

Delete links

Delete a link for the selected folder’s child folders or the selected project’s or view’s folders.

Generic item container rights

Create and place in folder

Create a folder in a parent folder, view, or project in which the Child Folder Access Rights dialog box has this option.

Share/Move out of folder

Share or move a folder in a parent folder, view, or project if its Child Folder Access Rights dialog has this option. Be aware that the access rights set for that folder and its contents, along with any rights set for specific child folders and items within that branch of the folder hierarchy, accompany the folder into the new folder.

Change behavior or configuration

Change the branching ability and configuration of folders that reside in a parent folder, view, or project if its Child Folder Access Rights dialog box has this option.

Back to top