Skip to main content

Hi

I’m trying to achieve the following folder and permissions structure:

  • A folder called Folder 1 has contents which can be viewed by specified users (let’s call them Group 1)
  • Group 1can create documents and/or folders within Folder 1
  • Documents created in Folder 1 (or a subfolder of Folder 1) by a user in Group 1 (called User 1) can be viewed by other Group 1users, and User 1 can specify in the document sharing settings if other Group 1 users can edit the document.
     

Is this structure possible on an Enterprise account?

Thanks
Kevin

Hi ​@Kevin Homewood 

Your desired structure is largely achievable using Lucidchart Enterprise team folders. one key limitation is that permissions set at the folder level are inherited by all subfolders and documents and cannot be overridden to restrict access for only some members of the group if they already have access via the parent folder.

  • While document-level sharing settings can be adjusted by the document owner, they cannot reduce access below what’s granted at the folder level.

If your workflow requires granular, per-document or subfolder permissions that differ from the parent folder’s settings, this would be a current limitation of Lucidchart’s permission system.

To learn more - Set Sharing Permissions for subfolder level in Team Folders | Community

Hope this helps - Happy to help further!!
Thank you very much and have a great one!
Warm regards


Thanks very much for the quick response ​@Humas1985 

I’m still not entirely sure I have the answer I need though. Your response mentions reducing access to child folders or documents, but I’m actually trying to increase access.

I want a teams to be able to view everything in a folder (including subfolders and documents in that folder). I also want those team members to be able to create documents and folders within that folder. What I want to avoid is when a document is created by a user, they should be be able to “lock” it from being edited by other users unless they explicitly share it with users giving edit rights in the document’s share settings. Those other users must still be able to view the document while it is “locked” for editing (only owner and shared editors can edit)..

I had imagined I’d need to have the parent folder set as view only when shared with relevant other users to achieve this but then, if I understand it correctly, although documents can have increased permissions added, I would lose the ability for those viewers to actually create documents in the first place (as they are only viewers of that parent folder). Or maybe they can create documents and add editors (which would be great), but they can’t create folders (as they are only viewers of that parent folder).

So like this:

 

PARENT FOLDER (view access for Group 1)

   - Subfolder 1 (view access for Group 1)
   - Group 1 can create a new subfolder within PARENT FOLDER. That folder would have view access for Group 1

   - Group 1 can create a document within PARENT FOLDER. That document would have view access for Group 1 and edit access for any users where they have explicitly had the document shared with them as editors
  


Hi ​@Kevin Homewood 

Thanks for the breakdown,

To the simplify the same, can you confirm my understanding listed below is accurate ?

- Allow all group members to create content
- Restrict group members to view-only access on each other's documents by default
- Enable explicit sharing for editing on a per-document basis.

Best Regards


That’s it exactly ​@Humas1985 . Thanks 


Hi ​@Kevin Homewood 

Thanks for confirming and There is no built-in way to allow a group to create content in a folder while restricting them to view-only access and this is a recognized limitation.

Best Regards


Reply