Item Object ACLs

[woodstylee3]

As we implement project level security which mapped through folders, it would be desirable if users could only see items where they can see the associated file.

It should be possible to set vault to mirror the Object Permissions on an item, to mirror the object Permissions on the the primary associated file, such that access to an item, is the same as access to the associated file.

[ihayesjr]

@woodstylee3 

Thank you for posting the idea.

You can drive file-level security from the item by using the item lifecycle.

Have you tried this?

Vault 2025 Help | Edit Lifecycle State Security for Files Associated with Items | Autodesk

[woodstylee3]

Hi Irvine, appreciate I am asking for the opposite of what vault does.

We apply object security to files through folder permissions as well as combined lifecycle state permissions for a workflow state. The folders giving us per project access control for read via active directory linked groups.

Ideally we want item read security based on the same address groups

[woodstylee3]

Hi Irvine, yes tested but I don't think can achieve what we are looking for.

We control access to reading files through active directory linked groups on the folder.

And ideally want, if you can see/read a file you can read the item. If you cannot read the file you cannot read the item.

Was suggesting the idea we could get the option to copy the sysacl from a linked file onto the item automatically to achieve this, to combine with the lifecycle ACL on the item