I will have three categories of users :

one will be allowed to use all Nuxeo Drive features (Sync a folder, Drive Edit a document) another one will only be allowed to edit a document online The others will not be able to use any Nuxeo Drive features

Those permissions will be based on belonging (or not) to two groups (drive and sync)

I tried to override some filters from org.nuxeo.drive.actions, example :

<filter id="can_drive_edit" >
    <rule grant="true">
        <condition>#{nuxeoDriveActions.canEditDocument(document)}</condition>
        <group>ubx:applis:collab:nuxeo:drive_edit</group>
    </rule>
    <rule grant="false">
        <facet>Collection</facet>
    </rule>
    <rule grant="false">
        <condition>#{ ! currentUser.isMemberOf('ubx:applis:collab:nuxeo:drive_edit')}</condition>
    </rule>
</filter>

It does not seem to work. I would like not to have to define a custom filter and override all existing actions. How should I procede ?