topic Define a custom role in permissionDefinitions.xml in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/define-a-custom-role-in-permissiondefinitions-xml/m-p/164847#M118567 <HTML><HEAD></HEAD><BODY><SPAN>Hi to all! I want to implement a security policy for my Alfresco installation (Alfresco Community 2.9B). This is the situation:</SPAN><BR /><BR /><SPAN>- I've defined an Alfresco group called USERS, and an Alfresco user called TESTUSER. TESTUSER belongs to USERS group</SPAN><BR /><SPAN>- In 'My Company' space I've created a space called 'Test Space'. This in not a cm:folder; the space type is a custom type, defined by testSpaceModel.xml. Here the XML:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>&lt;?xml version="1.0" encoding="UTF-8"?&gt;<BR /><BR />&lt;!– Test Space Model –&gt;<BR /><BR />&lt;model name="testSpace:testSpaceModel" xmlns="<A href="http://www.alfresco.org/model/dictionary/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/dictionary/1.0</A>"&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;!– Optional meta-data about the model –&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;description&gt;Test Space Model&lt;/description&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;author&gt;&lt;/author&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;version&gt;1.0&lt;/version&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;imports&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;!– Import Alfresco Dictionary Definitions –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;import uri="<A href="http://www.alfresco.org/model/dictionary/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/dictionary/1.0</A>" prefix="d" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;!– Import Alfresco Content Domain Model Definitions –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;import uri="<A href="http://www.alfresco.org/model/content/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/content/1.0</A>"&nbsp;&nbsp;&nbsp;prefix="cm" /&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/imports&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;namespaces&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;namespace uri="testSpace.model" prefix="testSpace" /&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/namespaces&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;types&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;type name="testSpace:folder"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;title&gt;Test Space&lt;/title&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;parent&gt;cm:folder&lt;/parent&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;mandatory-aspects&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;aspect&gt;testSpace:testSpaceMetadata&lt;/aspect&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/mandatory-aspects&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/type&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/types&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;aspects&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;aspect name="testSpace:testSpaceMetadata"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;title&gt;Test Space Metadata&lt;/title&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;properties&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;property name="testSpace:spaceStringProperty"&gt;&lt;type&gt;d:text&lt;/type&gt;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/properties&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/aspect&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/aspects&gt;<BR />&lt;/model&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>- Into 'Test Space' I load my documents. The document type is custom, defined in customDocumentModel.xml:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>&lt;?xml version="1.0" encoding="UTF-8"?&gt;<BR />&lt;!– Custom Document Model –&gt;<BR />&lt;model name="customDocument:customDocumentModel" xmlns="<A href="http://www.alfresco.org/model/dictionary/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/dictionary/1.0</A>"&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;!– Optional meta-data about the model –&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;description&gt;Custom Document Model&lt;/description&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;author&gt;&lt;/author&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;version&gt;1.0&lt;/version&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;imports&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;!– Import Alfresco Dictionary Definitions –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;import uri="<A href="http://www.alfresco.org/model/dictionary/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/dictionary/1.0</A>" prefix="d" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;!– Import Alfresco Content Domain Model Definitions –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;import uri="<A href="http://www.alfresco.org/model/content/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/content/1.0</A>"&nbsp;&nbsp;&nbsp;prefix="cm" /&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/imports&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;namespaces&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;namespace uri="customDocument.model" prefix="customDocument" /&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/namespaces&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;types&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;type name="customDocument:file"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;title&gt;Custom Document File&lt;/title&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;parent&gt;cm:content&lt;/parent&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;mandatory-aspects&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;aspect&gt;cm:titled&lt;/aspect&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;aspect&gt;cm:author&lt;/aspect&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;aspect&gt;customDocument:customDocumentMetadata&lt;/aspect&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/mandatory-aspects&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/type&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/types&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;aspects&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;aspect name="customDocument:customDocumentMetadata"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;title&gt;Custom Document Metadata&lt;/title&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;properties&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;property name="customDocument:docStringProperty"&gt;&lt;type&gt;d:text&lt;/type&gt;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;property name="customDocument:docLongProperty"&gt;&lt;type&gt;d:long&lt;/type&gt;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;property name="customDocument:docBooleanProperty"&gt;&lt;type&gt;d:boolean&lt;/type&gt;&lt;/property&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/properties&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/aspect&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/aspects&gt;<BR />&lt;/model&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>- Actually 'Test Space' security defines USERS with Alfresco role 'Editor'</SPAN><BR /><BR /><SPAN>I want to create a specific role in permissionDefinitions.xml. The required scenario is: USERS group on 'Test Space' can edit documents and metadata (like Editors) AND also make forum posts. Note that I don't want to grant USERS to add documents. I've tried many configurations in permissionDefinitions.xml, following Alfresco wiki and various Alfresco forum posts, but with no luck. Last configuration I've tried is (reporting only my modifications to permissionDefinitions.xml):</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>&lt;?xml version='1.0' encoding='UTF-8'?&gt;<BR />&lt;!DOCTYPE permissions &gt;<BR />&lt;!–PUBLIC '-//ALFRECSO//DTD PERMISSIONS//EN' 'permissionSchema.dtd' –&gt;<BR />&lt;!– Note: the above is commented out as spring does not seem to find the dtd –&gt;<BR />&lt;!– ============================================ –&gt;<BR />&lt;!– The base permission model for the repository –&gt;<BR />&lt;!– ============================================ –&gt;<BR />&lt;!– The parent permission checks were removed 20/1/2006 –&gt;<BR /><BR />&lt;permissions&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;!– Namespaces used in type references –&gt;<BR />&nbsp;&nbsp; &lt;namespaces&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.alfresco.org/model/system/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/system/1.0</A>" prefix="sys"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.alfresco.org/model/content/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/content/1.0</A>" prefix="cm"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.alfresco.org/model/wcmappmodel/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/wcmappmodel/1.0</A>" prefix="wca"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="customDocument.model" prefix="customDocument"/&gt;<BR />&nbsp;&nbsp; &lt;/namespaces&gt;<BR />&nbsp;&nbsp; <BR />&nbsp;&nbsp; […]<BR />&nbsp;&nbsp; <BR />&nbsp;&nbsp; &lt;permissionSet type="customDocument:file" expose="selected"&gt;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;<BR />&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &lt;permissionGroup name="MyEditory" allowFullControl="false" expose="true"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Same as Editor –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="cm:cmobject" permissionGroup="Consumer"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="Write"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="cm:lockable" permissionGroup="CheckOut"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="ReadPermissions"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– My specific permissions –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="customDocument:file" permissionGroup="AddChildren"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/permissionGroup&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp; &lt;/permissionSet&gt; <BR />&nbsp;&nbsp; <BR />&nbsp;&nbsp; […]<BR />&nbsp;&nbsp; <BR />&lt;/permissions&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>When I go to space permission management from web client, in order to add MyEditor role, I got this exception:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>User:admin ERROR [[localhost].[/alfresco].[jsp]] Servlet.service() for servlet jsp threw exception<BR />org.alfresco.repo.security.permissions.impl.model.PermissionModelException: There is no permission group :{customDocument.model}file AddChildren<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.model.PermissionModel.getPermissionGroup(PermissionModel.java:661)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.model.PermissionModel.grants(PermissionModel.java:534)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.model.PermissionModel.getGrantingPermissionsImpl(PermissionModel.java:491)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.model.PermissionModel.getGrantingPermissions(PermissionModel.java:475)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.PermissionServiceImpl$NodeTest.&lt;init&gt;(PermissionServiceImpl.java:663)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.PermissionServiceImpl.hasPermission(PermissionServiceImpl.java:386)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.PermissionServiceImpl.hasPermission(PermissionServiceImpl.java:577)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.GeneratedMethodAccessor228.invoke(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<BR />&nbsp;&nbsp;&nbsp;at java.lang.reflect.Method.invoke(Method.java:597)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:281)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:187)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:154)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:210)<BR />&nbsp;&nbsp;&nbsp;at $Proxy14.hasPermission(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.GeneratedMethodAccessor228.invoke(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<BR />&nbsp;&nbsp;&nbsp;at java.lang.reflect.Method.invoke(Method.java:597)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:281)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:187)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:154)<BR />&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:80)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:49)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:241)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:69)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:210)<BR />&nbsp;&nbsp;&nbsp;at $Proxy19.hasPermission(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.web.bean.repository.Node.hasPermission(Node.java:371)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.web.bean.users.UserMembersBean.getHasChangePermissions(UserMembersBean.java:257)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<BR />&nbsp;&nbsp;&nbsp;at java.lang.reflect.Method.invoke(Method.java:597)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.el.PropertyResolverImpl.getProperty(PropertyResolverImpl.java:457)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.el.PropertyResolverImpl.getValue(PropertyResolverImpl.java:85)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.el.ELParserHelper$MyPropertySuffix.evaluate(ELParserHelper.java:535)<BR />&nbsp;&nbsp;&nbsp;at org.apache.commons.el.ComplexValue.evaluate(ComplexValue.java:145)<BR />&nbsp;&nbsp;&nbsp;at org.apache.commons.el.UnaryOperatorExpression.evaluate(UnaryOperatorExpression.java:156)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.el.ValueBindingImpl.getValue(ValueBindingImpl.java:386)<BR />&nbsp;&nbsp;&nbsp;at javax.faces.component.html.HtmlSelectBooleanCheckbox.isDisabled(HtmlSelectBooleanCheckbox.java:103)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.shared_impl.renderkit.html.HtmlCheckboxRendererBase.isDisabled(HtmlCheckboxRendererBase.java:271)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.shared_impl.renderkit.html.HtmlCheckboxRendererBase.renderCheckbox(HtmlCheckboxRendererBase.java:252)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.shared_impl.renderkit.html.HtmlCheckboxRendererBase.encodeEnd(HtmlCheckboxRendererBase.java:64)<BR />&nbsp;&nbsp;&nbsp;at javax.faces.component.UIComponentBase.encodeEnd(UIComponentBase.java:539)<BR />&nbsp;&nbsp;&nbsp;at javax.faces.webapp.UIComponentTag.encodeEnd(UIComponentTag.java:498)<BR />&nbsp;&nbsp;&nbsp;at javax.faces.webapp.UIComponentTag.doEndTag(UIComponentTag.java:366)<BR />&nbsp;&nbsp;&nbsp;at org.apache.jsp.jsp.roles.manage_002dinvited_002dusers_jsp._jspx_meth_h_005fselectBooleanCheckbox_005f0(manage_002dinvited_002dusers_jsp.java:2096)<BR />&nbsp;&nbsp;&nbsp;at org.apache.jsp.jsp.roles.manage_002dinvited_002dusers_jsp._jspService(manage_002dinvited_002dusers_jsp.java:718)<BR />&nbsp;&nbsp;&nbsp;at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:98)<BR />&nbsp;&nbsp;&nbsp;at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)<BR />&nbsp;&nbsp;&nbsp;at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:328)<BR />&nbsp;&nbsp;&nbsp;at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:315)<BR />&nbsp;&nbsp;&nbsp;at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:265)<BR />&nbsp;&nbsp;&nbsp;at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:691)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:469)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:403)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:301)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:419)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.application.jsp.JspViewHandlerImpl.renderView(JspViewHandlerImpl.java:211)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(RenderResponseExecutor.java:41)<BR />&nbsp;&nbsp;&nbsp;at org.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:132)<BR />&nbsp;&nbsp;&nbsp;at javax.faces.webapp.FacesServlet.service(FacesServlet.java:140)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:81)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)<BR />&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:870)<BR />&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)<BR />&nbsp;&nbsp;&nbsp;at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)<BR />&nbsp;&nbsp;&nbsp;at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)<BR />&nbsp;&nbsp;&nbsp;at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)<BR />&nbsp;&nbsp;&nbsp;at java.lang.Thread.run(Thread.java:619)<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>I feel that I'm missing some concepts on Alfresco security model. Can anyone point me on the right direction? </SPAN><BR /><BR /><SPAN>Thanks!</SPAN><BR /><BR /><SPAN>Bye, Marco</SPAN></BODY></HTML> Sat, 05 Apr 2008 19:27:00 GMT marco_sindoni 2008-04-05T19:27:00Z Define a custom role in permissionDefinitions.xml https://connect.hyland.com/t5/alfresco-archive/define-a-custom-role-in-permissiondefinitions-xml/m-p/164847#M118567 Hi to all! I want to implement a security policy for my Alfresco installation (Alfresco Community 2.9B). This is the situation:- I've defined an Alfresco group called USERS, and an Alfresco user called TESTUSER. TESTUSER belongs to USERS group- In 'My Company' space I've created a space called 'Test Sat, 05 Apr 2008 19:27:00 GMT https://connect.hyland.com/t5/alfresco-archive/define-a-custom-role-in-permissiondefinitions-xml/m-p/164847#M118567 marco_sindoni 2008-04-05T19:27:00Z Re: Define a custom role in permissionDefinitions.xml https://connect.hyland.com/t5/alfresco-archive/define-a-custom-role-in-permissiondefinitions-xml/m-p/164848#M118568 <HTML><HEAD></HEAD><BODY><SPAN>Hi marco,</SPAN><BR /><BR /><SPAN>I never do that, but i think it's possible.</SPAN><BR /><BR /><SPAN>First, you did some mistake in your last configuration. Try this :</SPAN><BR /><SPAN>1- replace </SPAN><PRE class="language-none line-numbers"><CODE>&lt;permissionSet type="customDocument:file" expose="selected"&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN> by </SPAN><PRE class="language-none line-numbers"><CODE>&lt;permissionSet type="testSpace:folder" expose="selected"&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>–&gt; i think you need to define permission on your custom folder type</SPAN><BR /><BR /><SPAN>2- replace </SPAN><PRE class="language-none line-numbers"><CODE>&lt;includePermissionGroup type="customDocument:file" permissionGroup="AddChildren"/&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN> by </SPAN><PRE class="language-none line-numbers"><CODE>&lt;includePermissionGroup type="sys:base" permissionGroup="AddChildren"/&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>–&gt; AddChildren is permission group define in type sys:base.</SPAN><BR /><BR /><SPAN>This configuration means that you had created permissiongroup(= role) "MyEditory" on node with type "testSpace:folder". So if a user have this role, he will be&nbsp; be an editor and also to add children to this node.</SPAN><BR /><BR /><SPAN>I expect this works… <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://connect.hyland.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /></SPAN></BODY></HTML> Wed, 09 Apr 2008 15:24:09 GMT https://connect.hyland.com/t5/alfresco-archive/define-a-custom-role-in-permissiondefinitions-xml/m-p/164848#M118568 ribz33 2008-04-09T15:24:09Z