CODEWITHSUNDEEP
plone
user956424
user956424

Reputation: 1609

What are the permissions to enable changing of documentviewer settings in Plone for a Reader?

In Plone Unified installer v.4.1.4 with collective.documentviewer 2.2.1, I wish to enable document settings tab for a custom role i.e a reader who has view access and also who can only change the 'document settings' in the folder. I wish to allow this custom_reader role to download the file. I have disabled the at_download. My idea is the default 'Reader' role can access only documents for view, while the custom_reader role can access the document viewer settings in the submenu tab and enable 'Show sidebar' so that he can download the 'Original Document' by clicking on it. I want to know which is the exact permission(s) in the Security tab of ZMI which helps control this. At the moment if I allow edit permissions, the settings for this are editable but otherwise for the custom_reader though I allow 'Modify portal content' and 'Modify view template' the document viewer settings when clicked for the uploaded file shows message : 'You have insufficient rights..'. I do not wish to allow any other permissions to the custom_reader role.

I have custom workflow for folders which has only 'private' state without any transitions. Each folder will have 2 users 1. reader and other 2. custom_reader with download option. The entire plone site document viewer settings is set to show in full screen by default. So I want the permission for the custom_reader such that he can set the documentviewer settings to show the sidebox so that he can download using the 'Original Document' hyperlink. While the reader should not be able to download the file as he cannot access the sidebox of the documentviewer.

Upvotes: 0

Views: 249

Answers (1)

vangheem
vangheem

Reputation: 3293

You're question is a little unclear but here is what is happening.

The permission required is "Modify portal content" to be able to edit those settings and "Modify view template" for the button to show up.

I think this is a mistake as it should use the same button for both. Perhaps a pull request is needed.

That being said, if you grant these permissions, it should work as you expect. You'll also need to make sure your custom_reader role has View permission of course.

Upvotes: 1

Related Questions