Strategy One

Manage ACLs for Folders and Child Objects

Starting in Strategy One (August 2025), you can manage ACLs for children objects within folders. ACL security is very crucial in determining object security. It is often required to assign child objects different access from the parent and assign them consequently to the children objects. The ACL concept of parent-child relationships applies to the folder-object structure in Workstation.

Folder and Object Inheritance

Child folders inherit both Object and Children permissions, while child objects inherit only Children permissions.

Manage ACL Permissions for Child Objects and Folders

  1. Open the Workstation window.
  2. In the Navigation pane, click Projects and davigate to the desired folder.

  3. Right-click the folder and select Properties.

  4. In the left pane, click Security Access.

  5. Modify the Children Permissions for any of the users or user group and select how the children inherit ACLs.

    The following options are available:

    • Do not make any changes to the children

      • The change applies only to the folder where it was made and does not affect existing children. Any new folders or objects added to this folder will inherit the updated ACL permissions.

    • Merge selected permissions

      • Will merge existing and new ACL permissions.

    • Overwrite selected permissions

      • Only rows selected with the checkbox are propagated. This means that if multiple changes are made to multiple rows of users and user groups, any unchecked rows apply only to the current folder, while the checked rows will be propagated to—and will replace—the child folders and child objects.

    • Overwrite all permissions

      • Propagates the entire ACL permissions to child folders and child objects, regardless of the currently selected checkboxes.

  6. Click OK.

Manage ACL Permissions for Child Objects and Folders in previous versions

Prior to Strategy One (August 2025), folders display a column for Children Permissions, but followed previous propagation behavior determined by the following selections:

  • No option selected
    • The change applies only to the folder where it was made and does not affect existing children. Any new folders or objects added to this folder will inherit the updated ACL permissions.

  • Apply to all objects under this folder

    • Will merge existing and new ACL permissions.

  • Overwrite for all objects under this folder

    • Recursively replaces the ACL list in all child folders and child objects.