topic Re: Default access rights for a new user in Alfresco Archive

Default access rights for a new user

stideswe — Tue, 09 Sep 2008 03:52:20 GMT

HelloI have noticed that when I create a new user in Alfresco that the user is given "All Roles" access at the "Company Home" level. This is not desirable: I'd prefer for the new user to have no rights to any content and then to only get rights once added to some groups I have configured. Is there a

Re: Default access rights for a new user

spotlight2001 — Wed, 10 Sep 2008 10:12:19 GMT

direct sql is not very recommendable.

we used an approach of:
* web scripts (javascript): the entry point
* java extensions : backing logic

the WIKI describes it quite nicely. you might want to have also a look at the Alfresco Maven AMP Plugin.

resulting in the following:
* you can create users programmatically via WEB-URL (POST)
* an AMP (alfresco module package)

This approach required some "assembly", but once you are through, it is quite flexible.
We reused code from the Alfresco Web-Client module (source code is available).

kind regards

Re: Default access rights for a new user

stideswe — Thu, 18 Sep 2008 04:11:30 GMT

Hello Spotlight

Thanks for your reply. The reason why I wanted to use SQL and modify the tables directly is that we have an "Identity Management" solution that would allow us to create users in the DB based on LDAP accounts. I know I can use LDAP directly but I gather I lose cool things like the CIF's capability if I do that. So it seemed like a good option to integrate Alfresco with our LDAP (not Active Directory by the way) by using the Identity Management solution.

I might create a dump of the DB before and after creating a user to try and work out what tables/rows are altered.

Simon