Hi,

 

I believe one important thing should be added here: Even if you are not part of the listed Group in a COE, but part of a child-group, you will get access as if you would be a member of the parent group.

The ACL and corresponding script includes use the "getMyGroups()" function which returns parent groups as well. This directly conflicts with what is displayed in the policies.

 

Kind Regards

Markus