topic Permission role - Create and Modify in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/permission-role-create-and-modify/m-p/150078#M104980 <HTML><HEAD></HEAD><BODY><SPAN>Hi,</SPAN><BR /><BR /><SPAN>I was able to create a new role that can only read and modify content…..but</SPAN><BR /><SPAN>I couldn't create a role that can only read and create content … </SPAN><BR /><SPAN>I tried in this way:</SPAN><BR /><BR /><SPAN>permissionDefinition.xml:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />&lt;permissionSet type="cm:cmobject" expose="selected"&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– A Depositor can only read/create content –&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;permissionGroup name="Depositor" allowFullControl="false" expose="true" &gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="ReadChildren"/&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="ReadContent"/&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="CreateChildren"/&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="LinkChildren"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/permissionGroup&gt;<BR />&nbsp; &lt;/permissionSet&gt;<BR /><BR />&nbsp; &lt;permissionSet type="cm:content" expose="selected"&gt;<BR /><BR /><BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;permissionGroup name="Depositor" extends="true" expose="true"/&gt;<BR /><BR />&nbsp;&nbsp; &lt;/permissionSet&gt;<BR /><BR />&nbsp;&nbsp; &lt;!– Admin can do anything to any ndoe&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR /><BR />&nbsp;&nbsp; &lt;globalPermission permission="FullControl" authority="ROLE_ADMINISTRATOR"/&gt;<BR /><BR />&nbsp;&nbsp; <BR /><BR />&nbsp;&nbsp; &lt;!– For now, owners can always see, find and manipulate their stuff&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR /><BR />&lt;!–&nbsp;&nbsp; &lt;globalPermission permission="FullControl" authority="ROLE_OWNER"/&gt;–&gt;<BR /><BR />&nbsp;&nbsp; <BR /><BR />&nbsp;&nbsp; &lt;!– Unlock is granted to the lock owner&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR /><BR />&nbsp;&nbsp; &lt;globalPermission permission="Unlock" authority="ROLE_LOCK_OWNER"/&gt;<BR /><BR />&nbsp;&nbsp; <BR /><BR />&nbsp;&nbsp; &lt;!– Check in is granted to the lock owner&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR /><BR />&nbsp;&nbsp; &lt;globalPermission permission="CheckIn" authority="ROLE_LOCK_OWNER"/&gt;<BR /><BR />&nbsp;&nbsp; <BR /><BR />&nbsp;&nbsp; &lt;!– Cancel check out is granted to the locak owner&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR /><BR />&nbsp;&nbsp; &lt;globalPermission permission="CancelCheckOut" authority="ROLE_LOCK_OWNER"/&gt;<BR /><BR /><BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>I see the menu action "Create content" but using it I get :</SPAN><BR /><SPAN>"A system error happened during the operation: Access Denied. You do not have the appropriate permissions to perform this operation."</SPAN><BR /><BR /><SPAN>Can I actually have "create content" permissions without "modify permissions" ?</SPAN><BR /><BR /><SPAN>thanks in advance</SPAN><BR /><BR /><SPAN>Roberto</SPAN></BODY></HTML> Fri, 15 Feb 2008 15:22:25 GMT rluberti 2008-02-15T15:22:25Z Permission role - Create and Modify https://connect.hyland.com/t5/alfresco-archive/permission-role-create-and-modify/m-p/150078#M104980 Hi,I was able to create a new role that can only read and modify content…..butI couldn't create a role that can only read and create content … I tried in this way<IMG id="smileytongue" class="emoticon emoticon-smileytongue" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" />ermissionDefinition.xml:&lt;permissionSet type="cm:cmobject" expose="selected"&gt;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– A Depositor can only read/create content – Fri, 15 Feb 2008 15:22:25 GMT https://connect.hyland.com/t5/alfresco-archive/permission-role-create-and-modify/m-p/150078#M104980 rluberti 2008-02-15T15:22:25Z Re: Permission role - Create and Modify https://connect.hyland.com/t5/alfresco-archive/permission-role-create-and-modify/m-p/150079#M104981 <HTML><HEAD></HEAD><BODY><SPAN>Hi</SPAN><BR /><BR /><SPAN>I think you have no permissions on the thing you are trying to create as you have removed the owner permission. So you can not edit it after creation - which the UI may be doing.</SPAN><BR /><BR /><SPAN>When does the error occur?</SPAN><BR /><BR /><SPAN>Turn on auditing and you should be able to find out what failed.</SPAN><BR /><BR /><SPAN>Andy</SPAN></BODY></HTML> Tue, 26 Feb 2008 17:18:01 GMT https://connect.hyland.com/t5/alfresco-archive/permission-role-create-and-modify/m-p/150079#M104981 andy 2008-02-26T17:18:01Z