The following figure shows Domain Access Control for the user Mary and Dave who have Writer access to content in the Site A domain. Dave has the additional role of Learning Manager.
In this scenario, Mary and Dave can view all content in Site A and its descendant domains and can access any content that includes the Writer role. However, in this example, only Dave can view DOC B because that content has restricted its access roles to the Learning Manager role. Mary cannot view DOC B because she does not have the Learning Manager role assignment for the domain.
Therefore, this scenario shows that even though two users are in the same domain, their access to content within that domain is controlled by the roles that are assigned to them and the content.
User |
Role(s) |
Domain |
Description |
---|---|---|---|
Dave |
Writer, Learning Manager |
Site A |
Dave can view and edit DOC B in the Dept 1 domain because: The Access field in DOC B has been defined with the Learning Manager role and Dave has the Learning Manager role assigned to the Site A domain, which is inherited by Dave to Site A's descendant domain of Dept 1. |
Mary |
Writer |
Site A |
Mary cannot view or edit DOC B because she does not have the Learning Manager role assignment for the domain. |