# 4.5 Users unable to modify layouts created by other users while having full folder permission

**URL:** https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353
**Category:** CMS Features and Functionality
**Created:** [August 21, 2026, 9:57am UTC](https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353 "2026-08-21T09:57:45Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![MrStefan](https://community.xibo.org.uk/user_avatar/community.xibo.org.uk/mrstefan/32/17330_2.png) [@MrStefan](https://community.xibo.org.uk/u/MrStefan)
#### Post date: [August 21, 2026, 9:57am UTC](https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353/1 "2026-08-21T09:57:45Z")

</div>

# CMS Version

Xibo CMS 4.5.0

# Issue

After updating to 4.5.0 users are no longer able to modify layouts created by other users within the same folder.

The way we have set up permissions is as follows:

- We have a folder for each building
- For each folder, we have a user group that is given full permission to only that folder. No features are set, only sharing permission to create, modify and delete.
- All users are in a default group that determines which features they have access to.
- Each user is added to one or more user groups that allows them to manage one or more buildings

Before 4.5.0 users were able to modify everything in that folder, including layouts made by other users and myself (Administrator), even if that item wasn’t shared with the user(groups)

Since 4.5.0 users only have permission to create, modify and delete the things they are the owner of within that group. Other users do not have the possibility to make any changes to it.

Requesting each user to share their lay-out every time they create a new one is not the way we would like to move forward.

# Steps to reproduce

1. Boot up a fresh Docker installation
2. Create a new user group (TestGroup)
3. Create a new folder (TestFolder)
4. Share TestFolder with TestGroup, with create modify and delete permissions.
5. Create a new user (TestUser) and make it a content manager
6. Assign TestGroup to the TestUser
7. As an Administrator, create a lay-out in the TestFolder and publish it.
8. Sign-in as TestUser, head to layouts, and open the TestFolder.
9. Notice how TestUser does not have any permissions to your layout, despite having full access.

---

<div class="post-metadata">

### Author: ![MrStefan](https://community.xibo.org.uk/user_avatar/community.xibo.org.uk/mrstefan/32/17330_2.png) [@MrStefan](https://community.xibo.org.uk/u/MrStefan)
#### Post date: [August 21, 2026, 11:40am UTC](https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353/2 "2026-08-21T11:40:02Z")

</div>

It looks like it may have been moved to a different place, but changing any permissions there appears not to be working.

1. Head to the users page
2. Select any user and open their user settings.
3. Navigate to the “Folder permission” tab
4. Give the user “Full access” to one or more folders.
5. Click save

However, the problem here is that changing these permissions actually does not get saved. When you repeat the steps above, you can see that all the checkboxes you checked, are unchecked.

---

<div class="post-metadata">

### Author: ![MrStefan](https://community.xibo.org.uk/user_avatar/community.xibo.org.uk/mrstefan/32/17330_2.png) [@MrStefan](https://community.xibo.org.uk/u/MrStefan)
#### Post date: [August 21, 2026, 12:56pm UTC](https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353/3 "2026-08-21T12:56:40Z")

</div>

In both Xibo CMS 4.5.0 and Xibo CMS 4.5.1 this issue is present

---

<div class="post-metadata">

### Author: ![JerryW](https://community.xibo.org.uk/user_avatar/community.xibo.org.uk/jerryw/32/17676_2.png) [@JerryW](https://community.xibo.org.uk/u/JerryW)
#### Post date: [September 3, 2026, 6:18am UTC](https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353/4 "2026-09-03T06:18:02Z")

</div>

Hi MrStefan,

Thank you for reaching out to Xibo Community!

My name is Jerry from one of the support team. I have replicated the steps you have provided on a CMS V4.5.1 and I can see that the folder permissions are working as expected. Could you please try the below steps and check if it works for you?

**User Group Permissions.**  
Replication Steps:

1. Tested in cloud CMS V4.5.1 [https://jerryupdatedcms.xibo.co.uk/](https://jerryupdatedcms.xibo.co.uk/)

2. Create a new user group (TestGroup).

 ![image](https://community.xibo.org.uk/uploads/default/original/3X/d/2/d2038ecd904937d473133836619d17feddf7b897.png)

Features enabled are for ‘Folder’ and ‘Layout’ management.

 ![features](https://community.xibo.org.uk/uploads/default/original/3X/f/b/fb1411814a2228d4d9bfbdf77775082dae1c907b.jpeg)

3. Create a new user (TestUser, with user type set as ‘User’). No features enabled for this user as it will be inherited from the TestGroup user group.

 ![image-Sep-03-2026-06-04-32-6470-AM](https://community.xibo.org.uk/uploads/default/original/3X/a/4/a4fbbade642cd9e3f596df4feb6c615425cf9e1d.png)

4. Add TestUser to TestGroup user group

 ![image-Sep-03-2026-06-05-59-4745-AM](https://community.xibo.org.uk/uploads/default/original/3X/2/b/2b04b56acf1ade3a4611067f254277e9ecc34251.png)

5. Create a new folder (TestFolder)

 ![image-Sep-03-2026-06-07-33-8950-AM](https://community.xibo.org.uk/uploads/default/original/3X/6/2/62452bb8a6e9562cb8bb24a4149049204a872e10.png)

6. Share TestFolder with TestGroup, with create modify and delete permissions.

 ![image-Sep-03-2026-06-08-29-4319-AM](https://community.xibo.org.uk/uploads/default/original/3X/6/b/6b2ce6490a74e49d8f67cab0838744f92c698155.png)

7. As an Administrator, create a layout called ‘User Permission Test’ in the TestFolder and publish it.

 ![image-Sep-03-2026-06-10-52-4601-AM](https://community.xibo.org.uk/uploads/default/original/3X/a/5/a5a797c34b73ea0dd111b5e45121be3cc283ac4c.png)

8. Log in as the TestUser and confirm that the folder is there with the layout created in it.

 ![image](https://community.xibo.org.uk/uploads/default/original/3X/a/0/a0bb689110ca136ed0b6699ea0a021d8caf109c2.png)

Confirm if the folder has view (you should see the layout inside the folder), edit and delete permissions.

 ![image](https://community.xibo.org.uk/uploads/default/original/3X/5/a/5a6e0f3940d2d90dffce5d7ab925efb36129a289.png)

Important!  
Please click the small folder icon to view the folder tree and then select the correct folder that is shared to the user.

 ![image](https://community.xibo.org.uk/uploads/default/original/3X/b/c/bc891937be99643f0568af568915c4515d265f33.png)

The same is also working if you share the folder with the TestUser.

**Logged in as Admin and shared the folder to the TestUser**

 ![image-Sep-03-2026-06-34-29-9870-AM](https://community.xibo.org.uk/uploads/default/original/3X/7/9/79f517c70c7254ea73094ee1bd1b71b5464b021f.png)

**Logged in as the TestUser and can still view, edit and delete the layout.**

 ![image](https://community.xibo.org.uk/uploads/default/original/3X/e/b/eb7c9f82455695a4175b68676abc7a892a6c5c91.png)

Kind regards,

Jerry

---

<div class="post-metadata">

### Author: ![MrStefan](https://community.xibo.org.uk/user_avatar/community.xibo.org.uk/mrstefan/32/17330_2.png) [@MrStefan](https://community.xibo.org.uk/u/MrStefan)
#### Post date: [September 3, 2026, 6:53am UTC](https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353/5 "2026-09-03T06:53:14Z")

</div>

I have went ahead and made a screenrecording doing the same steps as I described earlier, on a new self-hosted docker installation on version 4.5.1  
[https://imgur.com/lr9Sz6k](https://imgur.com/lr9Sz6k)

* * *

The issue I’m experiencing appears to be the same as the following posted on GitHub, but instead of campaigns it’s for layouts:

> <https://github.com/xibosignage/xibo/issues/3922>
>
> A user cannot edit or delete a campaign that lives inside a folder shared with t…hem (view/edit/delete) via a user group, unless they are also the owner of that campaign. The campaign is visible in the folder, but the Edit/Delete actions do not work for it.
> 
> \## Steps to Reproduce
> 1. Create a folder and add a campaign to it.
> 2. Create a user group with all campaign features enabled.
> 3. Create a standard user and add them to the above user group.
> 4. Set shares on the folder from step 1 for the user group only (view/edit/delete).
> 5. Log in as that user and go to the folder. The campaign is visible, but cannot be edited or deleted.
> 
> 
> \## Expected
> The user should be able to edit and delete the campaign, since their user group has view/edit/delete shares on the folder containing it.
> 
> \## Actual
> The campaign is visible in the folder, but the Edit and Delete actions do not work for the user; they are not authorized in the UI even though the folder share grants edit/delete.

* * *

On top of that, granting “Full Access” in the user’s folder permission tab, does not appear to save the checkmarks.  
[https://imgur.com/jPd3cI4](https://imgur.com/jPd3cI4)

---

<div class="post-metadata">

### Author: ![MrStefan](https://community.xibo.org.uk/user_avatar/community.xibo.org.uk/mrstefan/32/17330_2.png) [@MrStefan](https://community.xibo.org.uk/u/MrStefan)
#### Post date: [September 3, 2026, 11:59am UTC](https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353/6 "2026-09-03T11:59:24Z")

</div>

Updated to version 4.5.2. The problem is solved

---

<div class="post-metadata">

### Author: ![JerryW](https://community.xibo.org.uk/user_avatar/community.xibo.org.uk/jerryw/32/17676_2.png) [@JerryW](https://community.xibo.org.uk/u/JerryW)
#### Post date: [September 7, 2026, 6:16am UTC](https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353/7 "2026-09-07T06:16:52Z")

</div>

Thanks for your confirmation.

Tests:

Xibo Cloud CMS V4.5.1—both user folder permissions and user group shared forlder permission inheritance are working

Self-hosted CMS docker V4.5.1—unconfirmed

Xibo Cloud CMS V4.5.2—both user folder permissions and user group shared forlder permission inheritance are working

Self-hosted CMS docker V4.5.2—both user folder permissions and user group shared forlder permission inheritance are working

Confired Known Issue for escalation—user folder permission via user \> row menu \> edit \> folder permissions \> select a permission \> save. The option for view, read and write, and full access tick boxes does not remain ticked when you select any them after saving it.

Test Videos:

**[https://drive.google.com/file/d/1AV40fWk1zxWkIzmPw\_hNyqfkD9PXDAXI/view?usp=sharing](https://drive.google.com/file/d/1AV40fWk1zxWkIzmPw_hNyqfkD9PXDAXI/view?usp=sharing)**

**[https://drive.google.com/file/d/1OTT1JGLECYZHyGum2hWYLSlBkbKP2-vZ/view?usp=sharing](https://drive.google.com/file/d/1OTT1JGLECYZHyGum2hWYLSlBkbKP2-vZ/view?usp=sharing)**

Recommendation:

Please test on the recent CMS V4.5.2 and let me know if it works or not.

---

<div class="post-metadata">

### Author: ![JerryW](https://community.xibo.org.uk/user_avatar/community.xibo.org.uk/jerryw/32/17676_2.png) [@JerryW](https://community.xibo.org.uk/u/JerryW)
#### Post date: [September 7, 2026, 6:30am UTC](https://community.xibo.org.uk/t/4-5-users-unable-to-modify-layouts-created-by-other-users-while-having-full-folder-permission/38353/8 "2026-09-07T06:30:01Z")

</div>

Confirmed Known Issue for escalation—user folder permission via user \> row menu \> edit \> folder permissions \> select a permission \> save. The option for view, read and write, and full access tick boxes does not remain ticked when you select any of them after saving it. Confirmed on both CMS V4.5.1 and V4.5.2

Update:  
This has already been escalated to our developers. When a public GitHub update is available, I will update this post. Thanks!
