{"action":"created","issue":{"url":"https://api.github.com/repos/baasbox/baasbox/issues/681","labels_url":"https://api.github.com/repos/baasbox/baasbox/issues/681/labels{/name}","comments_url":"https://api.github.com/repos/baasbox/baasbox/issues/681/comments","events_url":"https://api.github.com/repos/baasbox/baasbox/issues/681/events","html_url":"https://github.com/baasbox/baasbox/issues/681","id":58353809,"number":681,"title":"Allow to disable read, update and delete to document _author","user":{"login":"avently","id":7953703,"avatar_url":"https://avatars.githubusercontent.com/u/7953703?v=3","gravatar_id":"","url":"https://api.github.com/users/avently","html_url":"https://github.com/avently","followers_url":"https://api.github.com/users/avently/followers","following_url":"https://api.github.com/users/avently/following{/other_user}","gists_url":"https://api.github.com/users/avently/gists{/gist_id}","starred_url":"https://api.github.com/users/avently/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/avently/subscriptions","organizations_url":"https://api.github.com/users/avently/orgs","repos_url":"https://api.github.com/users/avently/repos","events_url":"https://api.github.com/users/avently/events{/privacy}","received_events_url":"https://api.github.com/users/avently/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-20T13:38:51Z","updated_at":"2015-02-20T14:10:24Z","closed_at":null,"body":"Hello. I'm creating a chat and in some situations i want to disable access to document's creator but Baasbox doesn't allow it. For example:\r\n\r\nBox.runAsAdmin(function(){\r\nBox.Documents.revoke(\"Dialogs\",dialog_id,\r\n            {\r\n                users: {\r\n                   all:username //this is username of the _author\r\n                }\r\n            });\r\n            \r\n    });\r\n\r\nIn this situation _author CAN read document and do what he want. My job is to hide this document from him because it's dialog wants user to delete. i just drop his \"read\" permission and other chat opponents will have access to this dialog.\r\n\r\nPlease, give us this kind of functionality. "},"comment":{"url":"https://api.github.com/repos/baasbox/baasbox/issues/comments/75243045","html_url":"https://github.com/baasbox/baasbox/issues/681#issuecomment-75243045","issue_url":"https://api.github.com/repos/baasbox/baasbox/issues/681","id":75243045,"user":{"login":"giastfader","id":2334584,"avatar_url":"https://avatars.githubusercontent.com/u/2334584?v=3","gravatar_id":"","url":"https://api.github.com/users/giastfader","html_url":"https://github.com/giastfader","followers_url":"https://api.github.com/users/giastfader/followers","following_url":"https://api.github.com/users/giastfader/following{/other_user}","gists_url":"https://api.github.com/users/giastfader/gists{/gist_id}","starred_url":"https://api.github.com/users/giastfader/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/giastfader/subscriptions","organizations_url":"https://api.github.com/users/giastfader/orgs","repos_url":"https://api.github.com/users/giastfader/repos","events_url":"https://api.github.com/users/giastfader/events{/privacy}","received_events_url":"https://api.github.com/users/giastfader/received_events","type":"User","site_admin":false},"created_at":"2015-02-20T14:10:24Z","updated_at":"2015-02-20T14:10:24Z","body":"That code should revoke the ownership of the document.\r\nAre you sure you did not grant to the author the READ permission too?\r\nRemoving from the ALL permission does not mean that he is implicitly removed from other permissions too.\r\nPlease check also for roles. If the author belongs to a role that has the READ permission on that document, then that user can still see it.\r\nAnd, finally, the users belonging to the administrator role have alway full access to all docs, files, and users' profile.\r\n"}}