Last month we complete a WCM migration from version 6.0.1.7 to 7.0.0.2. The final step was the setup of the inheritance of security settings from the library to the content. with the task
/ConfigEngine.sh run-wcm-admin-task-update-security -DWasPassword=password -DallLibraries=true -DremoveExistingPerms=true -DinheritPerms=apply -DrestrictOn=Content -DpreserveDates=true -libSecurity=true.
But with this command you will update only de Content type. If you have images referenced as components the security will not be updated.
To update all content types run the command without -DrestricticOn key.
