Everything you did sounds exactly right to me. I downloaded 1.1.1 (I'm assuming you're using the latest?) and ran through a new install. I set the permissions on the root space so that the first three checkboxes on the 'Anyone' group were checked and then checked all the boxes for the 'Registered Users' group (see attached screenshot global_permissions.png). Then I created a Space called 'foo', selected the 'private' option during the wizard (which results in red x's for every box for both registered users and anyone group, and then added rights for a group called 'test' (see attached screenshot foo_permissions.png). Then I went to the homepage of the site and logged in as a user 'aaron' who wasn't part of the 'test' group. The user 'aaron' was not shown the 'foo' space. I logged out and logged in as a user 'test', who was part of the 'test' group. The user 'test' was able to see the space 'foo'.
Are you using LDAP for your users or the database? What version of Clearspace are you on? What edition (internal or external)?
I cannot reproduce your situation. Here are the steps i followed to try:
1. Top level space: the first three boxes in the anyone row on the permissions screen have green checks, and the rest of the boxes in the registered users row have green checks *(as you have set up)
2. Created a subspace
3. Created a group, added a user
4. Set up permissions to have all red x's in anyone and registered users for subspace
5. Set up permissions for group to have all green check boxes
6. I then logged in as the user in the group (with permissions) and i was able to see the subspace
7. Logged out, logged in as a user not in the group, and i was not able to see the subspace
8. Logged out, browsed as anonymous user and could not see the subspace
So, for me this worked as expected.
So, maybe if you're still having trouble you could tell me:
a. What version of Clearspace are you using?
b. What steps you are doing differently?
Wow, that's odd. I did exactly what Will described, but got different behavior. I will test it again and get back to you. But I may not get to it until later today or Monday.
Meanwhile, we're using Clearspace X version 1.1.1 against an Oracle database:
Oracle Oracle Database 10g Express Edition Release 10.2.0.1.0 - Production
Anthony in Jive professional services is aware of our config.
No LDAP that I'm aware of.
Thanks for your help. - Robert
Ok, my bad. I had the groups set up incorrectly. Thanks for your help on this.
What could we have done better in the documentation / UI so that you were able to setup the groups correctly the first time? Any thoughts?
What would have helped me is a short explanation of the order of precedence among "anyone", "registered users", "<named> users", and "<named> groups" in the community permissions screens. I had to figure it out myself by trial and error, which was tedious. And I came up with the wrong answer to boot.