Issue
For a large corporate site, it is a common use case to divide it into different site sections and grant edit and publish permissions to specific user groups.
Inside each section, only members of that specific group should be able to create, edit, publish or delete their assets.
Each permission (creation, edit, publish, view) should be handled separately so we will be able to have, for example, two user groups in that section, one with edit permission and the other with publish permission.
Is it possible to configure a Liferay site in this way, with different user groups and site sections?
Environment
Liferay DXP 7.0-7.4
Resolution
Liferay out-of-the-box doesn't allow full implementation of this division without having to develop custom modules that manage assets permissions.
In Web content and Documents and Media, now, without any custom development is possible to:
- Create several folders and grant view permissions to specific user groups
- In each folder, grant "add web content", "add document", etc... to specific user groups
The major problem is when a new asset is created, only its owner will be able to edit or delete it, other members of that user group won't have enough permissions.
As a workaround, users can manually set up object permissions after creating the object, or implement an automatic process that adjusts object permissions according to object location.
There are some Jira issues asking for improving the permission management of web content and documents and media, such as LPS-88375 and LPS-87806.
Additional Information
- Feature request LPS-88375 - Allow having several user groups with their own site section and specific permissions
- Epic LPS-87806 - Permissions inheritance for DM