Users can delete subfolders created by other users

  •  09-14-2011, 5:54 AM

    Users can delete subfolders created by other users

    For document uploads, we are using "SetSecurityFileNamePrefix" to ensure that each user only sees documents that he or she has uploaded.  However, the problem is that any user can create a subfolder, and these subfolders can by seen by anybody.  This means that User A can delete a subfolder created by User B.  Even though User A only sees the subfolder and not any of the files inside it, when User A deletes the subfolder, he ends up deleting all of the files that are inside it, including all of those files created by User B!

    Is there any way to make it so that subfolders (like documents) can only be viewed by the users who created them?  Better yet, is there any way to disable the "create a subfolder" functionality altogether?

    Thank you,
    David Cohen

View Complete Thread