After scouring and searching the archives here I couldn't find the answer to the question so many have asked: Why can I not restrict what applications a user sees in eGroupware? (IOTW limit the icons across the top of the screen)
I figured it out now, so I thought I would post an answer for those people like me who have lost way too much of their time trying to figure this out. Hint to the eBox team - say something in the manual about this :-)
The permissions are additive. eGroupware permissions are applied to groups by default as well as the users. So if you apply rules to the user you get group_rules+user_rules. If you try to take permission away from only the user, you end up with the group rules, which by default is the default ruleset. If you think of the rules more like roles, and then placing users in roles, this makes more sense.
If this doesn't make sense at all, let me know :-)
Topic: eGroupware Permissions SOLVED! (Read 1429 times)