@@sharing view can remove roles that are site-wide, using acquire or other resource?

Suppose ADMINS is a group that has an Administrator role (site-wide).

In a different context of the Plone site (/Plone/folder) I would like to use the @@sharing view, and remove all roles from the ADMINS group and add some custom ones: the problem is that this isn't possible because Administrator role for ADMINS is site-wide.

Is it possible to remove the site-wide role for just a context in a Plone Site? Or will I have to do this by 开发者_如何学运维settings individual permissions on custom workflow states?

@@sharing manages local roles and user/group roles (AKA global roles) cannot be changed via local roles. What you can do, however, is not apply the roles using the group (IOW, just leave the group without any roles), then use /Plone/@@sharing at the portal root to assign that group local roles there, then in /Plone/folder/@@sharing you can uncheck Inherit permissions from higher levels and the local roles from /Plone will not be inherited there.