nilsteampassnet/TeamPass — Issue #27: Automatic role to folder association
Author: x-roast
Created: 2012-01-26 08:59:17+00:00
State: open

Scenario:
You have 3 users (basic users not managers or admins): User1, User2 and User3
You have 3 roles: Role1, Role2 and Role3
You have 3 folders at root level Folder1, Folder2 and Folder3.
You have the fallowing role to user settings settings:
User1 : Role1 & Role2
User2 : Role2 & Role3
User 3: Role 3
You have the fallowing directory to role setting:
Folder1: permitted to Role1, forbidden for Role2 & Role3
Folder2: permitted to Role2, forbidden for Role1 & Role3
Folder3: permitted to Role3, forbidden for Role1 & Role2

User1 creates a sub-folder named Folder1.1 in Folder1. As a result Folder1.1 will be automatically associated to both Role1 & Role2 (Folder1.1: permitted to Role1& Role2, forbidden for Role3)
At this point User2 will have access to Folder1.1 so he creates a sub-folder to Folder1.1 named Folder1.1.1. As a result Folder1.1.1 will be automatically associated to all 3 roles Role1,Role2 & Role3 (Folder1.1.1: permitted to Role1, Role2 & Role3, forbidden for non). So folder 1.1.1 will be accessible for all 3 users.

Taking in consideration that the users are simple users (not managers or admins) they wont even be able remove the permission from there newly created folders, further more, they probably wont even know that other users have access to there folders.

Do you consider this operation normal?

I recommend that the newly created folders should inherit the only the folder association of its parent folder.