Blind users role and default container

Question

Hi there !

I use the blind users role to hide objects to web operators but it seems that default containers (builtin, computers, users) are always visible, when i use group management features (so i always see groups like Users, Pre Windows 2000...)
Even if the user do not have the rights to edit these objects, i'd like these to be really hidden.

Any clue ?

Answer 1

Hello,

This happens because you excluded security principal Self from the activity scope of the Blind User role. The security principal Self also includes all groups a user is a member of.

To fix your problem you can do the following:

1. Create a new Security Role.

2. Add Deny Read Groups permission to this role.
   

3. Assign this role to Everyone over the groups that you what to hide.
   

   

4. Exclude the users that you want to allow to view these groups from the activity scope.
   

   

We are considering changing this behaviour, and probably in the next version, the security principal Self will be treated as the self user account only.

Comments

Thanks a lot !