Asset Permissions

G'day,

I have configured a top level parent asset to deny all functions to users with the role Editor. There are no other rules configured except in the property file where:

xcelerate.grant.*=SitesUser

Logging in as the user with only the Editor (and the obligatory SitesUser) role, I could still perform all actions on the asset.

Why is this so?

Now when I made sure all xcelerate.grant.* and xcelerate.deny.* are empty, then it works.

According to the admin guide (11.1.1.8.0), section 9.3.2, page 9-17, asset permissions on the asset takes precedence.

thanks

Matt