Group A has permission to download files in Content Library.
Group B does not have permission to download files in Content Library.
If a user is a member of both groups, what will be the result?
A.
The user cannot download file from Content Library.
B.
The user can download file from Content Library.
C.
The user cannot access Content Library.
D.
The user can access Content Library.
I think is true (answer B), because to not have a permission is not the same as a forbidden permision. So, the user will still have the permission to download from the group A.
Isn’t it?
8
1
surely B
5
1
Correct B. No permission is not equal to Deny permission.
Permission inheritance (not in any order):
* Permissions are additive if not in conflict so user gets permissions from both groups.
* Permissions at lower level in hierarchy has precedence.
* Permissions on user has precedence over Group
* Deny permissions has precedence over Allow.
https://pubs.vmware.com/vsphere-4-esx-vcenter/index.jsp?topic=/com.vmware.vsphere.bsa.doc_40/vc_admin_guide/managing_users_groups_roles_and_permissions/c_multiple_permission_settings.html
2
0
I agree, B is the correct one
1
0
Agree with B. ‘Does not have permission’ doesn’t mean deny. You can either add the permission or leave it blank.
____________________
If multiple group permissions are defined on the same object and a user belongs to two or more of those groups, two situations are possible:
No permission for the user is defined directly on the object. In that case, the user has the privileges that the groups have on that object.
A permission for the user is defined directly on the object. In that case, the user’s permission takes precedence over all group permissions.
https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-72EE3449-79FD-4E7A-B164-26904958540F.html
____________________
This doc shows an exact example:
https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-5F611264-091F-47C7-A378-AB551059F6CA.html
1
0