"Can Contribute" and "Can Read" sections of KB Properties does not seem to do anything

[stephaniet]

My company has multiple locations that want to keep knowledge base articles "separate but together".   Meaning that each location wants their own KB so that they can contribute their own articles for specific things to their locations, while keeping it open to be read by everyone in the company (especially the centralized Service Desk).

I am creating the separate Knowledge Bases and am trying to limit "contribute" access by group.   I have created my User Criteria as follows:

The KB is set up as follows:

When I test with someone that is not part of the Can Contribute group, they are still able to save and publish an article.   I've also tried removing ITIL Users from the Can Read and adding the same Can Contribute group to see if I could limit who can see the KB, but a user outside that group can still see it.   I don't know what I am missing.   Any help would be greatly appreciated!

[Arnab Karak]

Can you please uncheck the "Match All" field and try.

[stephaniet · Accepted solution]

We didn't realize that the people we were using to test were knowledge admins.   So of course, they could post to any KB.   The "Match All" check box is necessary so that it requires the user to match all the criteria (active and part of the group) in order for it to allow the person to post to the KB.   If "Match All" is not selected, the user will only need to match one of the criteria.

[Servicenow10]

am facing same issue and even after making the changes not able to get the desired result