topic Re: How to restrict admin user access to some content in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/how-to-restrict-admin-user-access-to-some-content/m-p/155796#M110100 <HTML><HEAD></HEAD><BODY><SPAN>It seems to me that the admin user MUST be a trusted user.&nbsp; You need to set up users/roles for everyone else to access only the portion of the systems and rights you wish them to have.&nbsp; But, just like a system admin for a windows XP network, there is an admin that has access to ALL data on the system.&nbsp; It is impossible to lock them out, nor would you want to.&nbsp; If there is a problem, you would want an admin to be able to fix the problem.</SPAN><BR /><BR /><SPAN>Several years ago I worked for a company that had a finance/payroll system that was programmed in-house.&nbsp; That meant that the programmer had access to sensitive information about payroll.&nbsp; For the most part everyone was oblivious, but one day it came to light with managment.&nbsp; There was a huge issue made of it, that he cannot have access to the sensitive information.&nbsp; Well, it was impossible for him to do his job and maintain the system otherwise.&nbsp; The only solution at the time was for hime to become a trusted source, or they needed to hire a programmer that would be.</SPAN><BR /><BR /><SPAN>So, the only way to handle this situation is only a trusted source has the admin password, Just like the admin of the network has access to all network files.</SPAN><BR /><BR /><SPAN>All other users you place in a box and remove security rights.</SPAN></BODY></HTML> Tue, 06 May 2008 14:02:55 GMT nyronian 2008-05-06T14:02:55Z How to restrict admin user access to some content https://connect.hyland.com/t5/alfresco-archive/how-to-restrict-admin-user-access-to-some-content/m-p/155795#M110099 HiAs far as I know, alfresco grants full acces to the admin user; I mean, admin user can read, write, and do anytihing he wants with any document stored in Alfresco;As a business requirement (or legal requirement maybe), there's some kind of information that can not be accessed by any other person t Fri, 02 May 2008 14:02:55 GMT https://connect.hyland.com/t5/alfresco-archive/how-to-restrict-admin-user-access-to-some-content/m-p/155795#M110099 jzulu2000 2008-05-02T14:02:55Z Re: How to restrict admin user access to some content https://connect.hyland.com/t5/alfresco-archive/how-to-restrict-admin-user-access-to-some-content/m-p/155796#M110100 <HTML><HEAD></HEAD><BODY><SPAN>It seems to me that the admin user MUST be a trusted user.&nbsp; You need to set up users/roles for everyone else to access only the portion of the systems and rights you wish them to have.&nbsp; But, just like a system admin for a windows XP network, there is an admin that has access to ALL data on the system.&nbsp; It is impossible to lock them out, nor would you want to.&nbsp; If there is a problem, you would want an admin to be able to fix the problem.</SPAN><BR /><BR /><SPAN>Several years ago I worked for a company that had a finance/payroll system that was programmed in-house.&nbsp; That meant that the programmer had access to sensitive information about payroll.&nbsp; For the most part everyone was oblivious, but one day it came to light with managment.&nbsp; There was a huge issue made of it, that he cannot have access to the sensitive information.&nbsp; Well, it was impossible for him to do his job and maintain the system otherwise.&nbsp; The only solution at the time was for hime to become a trusted source, or they needed to hire a programmer that would be.</SPAN><BR /><BR /><SPAN>So, the only way to handle this situation is only a trusted source has the admin password, Just like the admin of the network has access to all network files.</SPAN><BR /><BR /><SPAN>All other users you place in a box and remove security rights.</SPAN></BODY></HTML> Tue, 06 May 2008 14:02:55 GMT https://connect.hyland.com/t5/alfresco-archive/how-to-restrict-admin-user-access-to-some-content/m-p/155796#M110100 nyronian 2008-05-06T14:02:55Z