2
votes

I created some users in our Sitecore 8 instance and gave them the editor roles so they can work in the content editor and media library. I also granted them the rights in the tree in the Security Editor / Access Viewer.

Right now the editors can write into the items I granted them, but they still cannot create, rename, copy or duplicate items in the content editor. In the Security Editor I haven't found columns for these actions.

Am I missing a role?

EDIT: Screenshot of Access Viewer:

enter image description here

3
Does to the editor belong to more than one role? Do any of those roles specifically have Deny access applied to them? Double check the user itself in the Security Viewer - jammykam
Yes, the editor belongs to two roles. One role is a simple one that should grant access to the Netzforum subtree. The other role "editors" is a role I created and put in all Sitecore roles needed for editors. You are right, that "editors" role has indeed deny on create and so on rights. When I try to grant them, I get this message: "The item has individial inheritance rules set for each permission." And this: "Access to this Item is denied as no access rule allows access." - SpaceJump
A deny right always overrules. - Jan Bluemink
Ok, I granted everything on that subtree for the second role too, so both roles grant. Still the same: The editor cannot grant or rename items. Strangely delete is possible. Even removing the second role from the user doesn't make a difference. - SpaceJump
Check my previous which might help set up your permissions correctly - jammykam

3 Answers

0
votes

In the Security editor, click on the "Columns" Button than you can select the columns to show. (Like Rename, Create, Delete)

Here you can found a rol description The security roles And much more about Security and Administration

0
votes

Found out why editors could write to items, but couldn't rename or create items. I had the two roles Limited Content Editor and Limited Page Editor assigned to my Editor role. Once I removed them, everything worked as expeceted.

Thanks for all your answers anyway :)

0
votes

Usually this is due to conflicts of multiple roles. If this user belongs to two roles and one has write strictly turned off, this will trump the role which has write turned on for the same item.