Configuring Folder Types

overview the foldertemplate parameter in activate stores templates for the various folder types that users can create via activate it comes with 5 default types detailed below and can be extended or modified to suit customer requirements this parameter can be found at //resources/folders in activate studio configuring folder access rights in templates the \<rights> element in the folder configuration xml defines how permissions are applied to folders and which groups receive them this section explains the syntax used in the rights string and how it is interpreted by the system rights string syntax the rights string is a compact format that encodes access type (list, read, write, full, etc ) inheritance behavior allow or deny target group sid each entry in the \<rights> string is separated by a semicolon (;) and follows this pattern \[modifiers]\[access];\[sid] \[access] modifiers and their effects modifier description (prefix) sets aceflags = none — disables inheritance entirely folders sets aceflags = container inherit ace — applies to folders only files sets aceflags = container inherit ace (same as folders) deny sets ballow = false — creates a deny ace instead of allow access characters character grants access to… l list access (file list directory or similar) r read (file generic read + file execute) w write (file generic write + file execute) c change (read + write + execute + delete) f full control (file all access) d delete only (delete) 0x hexadecimal access mask (overrides character based access) this is an advanced method for more complex permissions special case disabling inheritance with if the rights string starts with a hyphen ( ), it explicitly disables all inheritance by setting aceflags = none this is useful when you want the ace to apply only to the current folder, not to any subfolders or files example \<rights> r;%=//groups/0/sid/sidstring%\ r\</rights> this means no inheritance the ace applies only to the current folder read access granted to the group identified by the sid allow ace because deny is not present example breakdown \<rights> folders r;%=//groups/0/sid/sidstring%\ r\</rights> folders → apply to folders only r → read access sid → target group result read only access to folders (not files) folder types explained each \<folder> element defines a template for creating a folder with specific access control settings these templates include display info title, description, and icon for ui representation template logic \<rights> defines access control entries (aces) using sids (security identifiers) \<listaccess> controls visibility of the folder in listings \<groups> specifies ad groups to be created and linked to the folder folder types folder name description groups created rights summary nosecurity inherits access from parent folder none inherit only privateandpublished creates read and write groups read only and full control access split 2 (read, write) read + change private only users in the new group have access others are denied 1 (write) change only published users in the group get read only access inherits parent access 1 (read) read only common users in the group get full access inherits parent access 1 (write) change default folder types nosecurity \<folder name="nosecurity"> \<display> \<title>no additional security\</title> \<description>anyone with access to the parent folder will be granted the same access to this folder \</description> \<image>folder lg\</image> \</display> \<template> \</template> \</folder> privateandpublished \<folder name="privateandpublished"> \<display> \<title>published and private folder\</title> \<description>this folder can be used to give some users read access and some users write access \</description> \<image>folder+share lg\</image> \</display> \<template> \<rights> all;%=//folder/folderdefaults/folder/standardrights%;%=//groups/0/sid/sidstring%\ r;%=//groups/1/sid/sidstring%\ c\</rights> \<listaccess>=//folder/folderdefaults/folder/listaccess\</listaccess> \<groups> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/read%\</name> \<description>=//folder/uncpath\</description> \<type>%=//folder/folderdefaults/group/type%\</type> \</group> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/write%\</name> \<description>=//folder/uncpath\</description> \<type>%=//folder/folderdefaults/group/type%\</type> \</group> \</groups> \</template> \</folder> private \<folder name="private"> \<display> \<title>private folder\</title> \<description>users in the new group will have full access to this folder \<br>all other users (including users with access to the parent folder) will not be able to access this folder \</description> \<image>folder+lock lg\</image> \</display> \<template> \<rights> all;%=//folder/folderdefaults/folder/standardrights%;%=//groups/0/sid/sidstring%\ c\</rights> \<listaccess>=//folder/folderdefaults/folder/listaccess\</listaccess> \<groups> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/write%\</name> \<description>=//folder/uncpath\</description> \<type>=//folder/folderdefaults/group/type\</type> \</group> \</groups> \</template> \</folder> published \<folder name="published"> \<display> \<title>published folder\</title> \<description>users in the new group will be granted read only access to this folder \<br>anyone with access to the parent folder will be granted the same access to this folder \</description> \<image>folder+tick lg\</image> \</display> \<template> \<rights>%=//folder/folderdefaults/folder/standardrights%;%=//groups/0/sid/sidstring%\ r\</rights> \<listaccess>=//folder/folderdefaults/folder/listaccess\</listaccess> \<groups> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/read%\</name> \<description>=//folder/uncpath\</description> \<type>=//folder/folderdefaults/group/type\</type> \</group> \</groups> \</template> \</folder> common \<folder name="common"> \<display> \<title>common folder\</title> \<description>users in the new group will have full access to this folder \<br>all users from the parent folder will still have access this folder \</description> \<image>folder+ok lg\</image> \</display> \<template> \<rights>%=//folder/folderdefaults/folder/standardrights%;%=//groups/0/sid/sidstring%\ c\</rights> \<listaccess>=//folder/folderdefaults/folder/listaccess\</listaccess> \<groups> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/write%\</name> \<description>=//folder/uncpath\</description> \<type>=//folder/folderdefaults/group/type\</type> \</group> \</groups> \</template> \</folder>