K
kmyerqsv
Hello,
I am publishing some applications and using Group security to filter access control. Rather than add all corporate users to each application individually, I have added them to a corporate group, which in turn is added to each remote office group, for access to that remote office's application.
So in essence:
Group A (Corporate);
User A
User B
Group B (Remote Office):
User C
User D
Group A
App A is published with Group filtering, with the group set to Group B.
When apps are published with Group filtering, only User C and User D have the app show up. Members of Group A do not have the app show up, even though Group A is a member of Group B. The Windows Effective Permissions shows this setup to be working, as the proper permissions cascade through; however the ApplicationServer doesn't seem to handle this group of groups sort of setup.
User accounts and groups are stored in Active Directory (Win2K3, R2, SP2).
Is this a limitation of the 2X ApplicationServer user/group enumeration code or something else?
Thanks,
Kevin
I am publishing some applications and using Group security to filter access control. Rather than add all corporate users to each application individually, I have added them to a corporate group, which in turn is added to each remote office group, for access to that remote office's application.
So in essence:
Group A (Corporate);
User A
User B
Group B (Remote Office):
User C
User D
Group A
App A is published with Group filtering, with the group set to Group B.
When apps are published with Group filtering, only User C and User D have the app show up. Members of Group A do not have the app show up, even though Group A is a member of Group B. The Windows Effective Permissions shows this setup to be working, as the proper permissions cascade through; however the ApplicationServer doesn't seem to handle this group of groups sort of setup.
User accounts and groups are stored in Active Directory (Win2K3, R2, SP2).
Is this a limitation of the 2X ApplicationServer user/group enumeration code or something else?
Thanks,
Kevin