Nested AD Groups

[Duke5A]

HAP only checks a user's immediate group membership and won't do nested, correct? Thanks!

[nickbro]

Unless you have disabled the write checks, HAP+ should check for permissions on sub folders in the extended/v8 versions when you load a parent folder. The basic version only checks when you access a folder.

 

Since HAP+ impersonates the user that is logged it so you should get the same permissions

[nickbro]

If you want to restrict access to HAP completely to a sub group, asp.net permissions is what you need on that one, basically the permissions system works top to bottom, so if you put a deny rule above the allow rule, it will deny before allowing