Configuring Folder Types

overview the foldertemplate parameter in activate stores templates for the various folder types that users can create via activate, it comes with 5 default types detailed below and can be extended or modified to suit customer requirements this parameter can be found at //resources/folders in activate studio configuring folder access rights in templates the \<rights> element in the folder configuration xml defines how permissions are applied to folders and which groups receive them this section explains the syntax used in the rights string and how it is interpreted by the system rights string syntax the rights string is a compact format that encodes access type (list, read, write, full, etc ) inheritance behavior allow or deny target group sid each entry in the \<rights> string is separated by a semicolon ( ; ) and follows this pattern \[modifiers]\[access];\[sid] \[access] modifiers and their effects true 330,331left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type access characters true 330,331left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type special case disabling inheritance with if the rights string starts with a hyphen ( ) , it explicitly disables all inheritance by setting aceflags = none this is useful when you want the ace to apply only to the current folder , not to any subfolders or files example \<rights> r;%=//groups/0/sid/sidstring%\ r\</rights> this means no inheritance the ace applies only to the current folder read access granted to the group identified by the sid allow ace because deny is not present example breakdown \<rights> folders r;%=//groups/0/sid/sidstring%\ r\</rights> folders → apply to folders only r → read access sid → target group result read only access to folders (not files) folder types explained each \<folder> element defines a template for creating a folder with specific access control settings these templates include display info title, description, and icon for ui representation template logic \<rights> defines access control entries (aces) using sids (security identifiers) \<listaccess> controls visibility of the folder in listings \<groups> specifies ad groups to be created and linked to the folder folder types true 165,165,165,166left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type left unhandled content type default folder types nosecurity \<folder name="nosecurity"> \<display> \<title>no additional security\</title> \<description>anyone with access to the parent folder will be granted the same access to this folder \</description> \<image>folder lg\</image> \</display> \<template> \</template> \</folder> privateandpublished \<folder name="privateandpublished"> \<display> \<title>published and private folder\</title> \<description>this folder can be used to give some users read access and some users write access \</description> \<image>folder+share lg\</image> \</display> \<template> \<rights> all;%=//folder/folderdefaults/folder/standardrights%;%=//groups/0/sid/sidstring%\ r;%=//groups/1/sid/sidstring%\ c\</rights> \<listaccess>=//folder/folderdefaults/folder/listaccess\</listaccess> \<groups> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/read%\</name> \<description>=//folder/uncpath\</description> \<type>%=//folder/folderdefaults/group/type%\</type> \</group> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/write%\</name> \<description>=//folder/uncpath\</description> \<type>%=//folder/folderdefaults/group/type%\</type> \</group> \</groups> \</template> \</folder> private \<folder name="private"> \<display> \<title>private folder\</title> \<description>users in the new group will have full access to this folder \<br>all other users (including users with access to the parent folder) will not be able to access this folder \</description> \<image>folder+lock lg\</image> \</display> \<template> \<rights> all;%=//folder/folderdefaults/folder/standardrights%;%=//groups/0/sid/sidstring%\ c\</rights> \<listaccess>=//folder/folderdefaults/folder/listaccess\</listaccess> \<groups> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/write%\</name> \<description>=//folder/uncpath\</description> \<type>=//folder/folderdefaults/group/type\</type> \</group> \</groups> \</template> \</folder> published \<folder name="published"> \<display> \<title>published folder\</title> \<description>users in the new group will be granted read only access to this folder \<br>anyone with access to the parent folder will be granted the same access to this folder \</description> \<image>folder+tick lg\</image> \</display> \<template> \<rights>%=//folder/folderdefaults/folder/standardrights%;%=//groups/0/sid/sidstring%\ r\</rights> \<listaccess>=//folder/folderdefaults/folder/listaccess\</listaccess> \<groups> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/read%\</name> \<description>=//folder/uncpath\</description> \<type>=//folder/folderdefaults/group/type\</type> \</group> \</groups> \</template> \</folder> common \<folder name="common"> \<display> \<title>common folder\</title> \<description>users in the new group will have full access to this folder \<br>all users from the parent folder will still have access this folder \</description> \<image>folder+ok lg\</image> \</display> \<template> \<rights>%=//folder/folderdefaults/folder/standardrights%;%=//groups/0/sid/sidstring%\ c\</rights> \<listaccess>=//folder/folderdefaults/folder/listaccess\</listaccess> \<groups> \<group> \<parentou>=//folder/groupou/ou\</parentou> \<name>%=//folder/folderdefaults/group/write%\</name> \<description>=//folder/uncpath\</description> \<type>=//folder/folderdefaults/group/type\</type> \</group> \</groups> \</template> \</folder>