topic Re: Customize permissions based on types in Alfresco Archive

Customize permissions based on types

burriad — Wed, 01 Apr 2009 14:29:16 GMT

I would like to customize the permissions based on user-defined types. To this end i devised the following space types:myarentfolder: Extends cm:folder, has some additional aspects and shall not be modifiable by "normal" usersmy:subfolder: Extends cm:folder and can be used by "normal" users to str

Re: Customize permissions based on types

andrepra — Fri, 03 Apr 2009 07:19:37 GMT

I think you can try in this two ways.
1. Create a script that assign the right permissions (contributor, consumer, …) for groups/users to the folder based on the type of folder. After that create a content rule on your root that call this script configuring the conditions on the two types you have created. Look JavaScript API

2. Create a custom aspect. Download the sdk and look at the Custom Aspect project. Implementing a java class you have more control but it's more difficult.

Hope to be helpful
A.

Re: Customize permissions based on types

burriad — Tue, 07 Apr 2009 15:28:40 GMT

Thanks a lot for the reply. I hoped this was doable in configuration as well, but it ain't so, even though the following works fine:


<permissionSet type="cm:cmobject" expose="selected">
    <permissionGroup name="Dummy" expose="true" >
</permissionSet>

<permissionSet type="cm:folder" expose="selected">
    <permissionGroup name="Dummy" extends="true" type="cm:cmobject" expose="true" >
         <includePermissionGroup permissionGroup="Read" type="sys:base" />
    </permissionGroup>
</permissionSet>

<permissionSet type="cm:content" expose="selected">
    <permissionGroup name="Dummy" extends="true" type="cm:cmobject" expose="true" >
         <includePermissionGroup permissionGroup="Read" type="sys:base" />
         <includePermissionGroup permissionGroup="Write" type="sys:base" />
         <includePermissionGroup permissionGroup="Delete" type="sys:base" />
    </permissionGroup>
</permissionSet>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

That is, I can variate the permissions between spaces and content, using the same role "Dummy"*. Unfortunately, the same trick doesn't work anymore when subclassing the folders as presented in the first post of this thread. This is either stupidity from my side, or a bug in Alfresco. Of course I opt for the latter

* The code above has the effect that on the folder itself, "Dummy" has only read permissions, on the content however, he has the right to write and delete as well

Re: Customize permissions based on types

burriad — Wed, 08 Apr 2009 07:35:12 GMT

Now that was an optical illusion. Even in this setting, everything I allow on the content is allowed on the folder, too…

Re: Customize permissions based on types

burriad — Tue, 05 May 2009 13:02:43 GMT

After long hours of trying, I am convinced that this is not possible in configuration. However, I documented a solution that works here: http://forums.alfresco.com/en/viewtopic.php?f=9&t=6180