UCM Folders custom alternate security model

Question

Hi All,
Im working on a Proof of Concept using UCM 10GR3 and we need help from you guys.
The content will be categorized using the Folders structure from the Oracle Folders Component.
Let’s look this example:
1. The user DANIEL creates the folder A and sets who will have access (R,RW,RWD,RWDA);
2. DENIS another user from UCM get permission to access the folder A and starts to create his own Folders (A1, A2, A3) and defines who will access these Folders and their permissions but if he doesn’t set access permission to DANIEL he (DANIEL) won’t be capable to see these Folders content .
So, this security model is defined for each Folder and won’t be hierarchical.
I`ve already explained for the customer about possible problems with inappropriate content stored inside some users Folders and the lack of permission from their superiors to control this.
But they don’t want to go another way.
This customer didn’t like UCM Collaboration Manager concept of Projects, Dashboards and so on.
They prefer Folders with this ‘ Custom’’ security model because simplicity and not hierarchical security model are crucial points.
Is there any case about the use of this security model or some ideas about how do that for Oracle Folders?
Best Regards
Daniel

Answer 1

I think accounts can do the trick. You'll have to write a component that automaticcly creates account if someone adds a folder.
With accounts you can give someone permission in a hierarchical way. You define for example an account A/1 A/2 A/3
If Daniel creates a folder your component can automaticlly create an account A
If Denis creates a folder A/1 your component would create A/1
If daniel grants denis the A account he gets permission to the A folder
if Denis don't grant daniel the A/1 account. he doesn't have acces to that folder. Is that what you wnat?
There is a small problem with this construction and that is that a user normally can't grant, revoke accounts. It's done in the user admin applet so you're component would normally add some functionallity so users could add delete accounts but that't kinda tricky...