topic Re: Problem with permissions over groups(behaviour of heritance) in Alfresco Archive

Problem with permissions over groups(behaviour of heritance)

venzia — Mon, 04 May 2009 17:19:03 GMT

Hi all, i have the follow scenario : GROUP-A _________________ | | Group-A-A Group-A-B | | Group-A-A-A Group-A-B-A‍‍‍‍‍‍the problem

Re: Problem with permissions over groups(behaviour of heritance)

kalpesh_patel — Tue, 05 May 2009 11:58:49 GMT

Give me more information about this scenario.

1. Are you giving permissions to the content of space?
2. Do you have a consumer->read permission configured for your space?
3. Do you have "Inherit Parent Space Permissions" check box selected for your top level space?

Re: Problem with permissions over groups(behaviour of heritance)

venzia — Tue, 05 May 2009 16:55:47 GMT

1. Are you giving permissions to the content of space?
2. Do you have a consumer->read permission configured for your space?
3. Do you have "Inherit Parent Space Permissions" check box selected for your top level space?

To answer all questions i paste the script body (the simple way) and explain the process and other details.
Script Body :


//cut inheritance
document.setInheritsPermissions(false);
//get groups of the user (in this example if the user belongs to Group-A-A-A the function return Group-A-A-A,Group-A-A and Group-A )
var arr=people.getContainerGroups(person);
var i;
for(i=0;i<arr.length;i++) 
  document.setPermission("Read",arr[i].properties["usr:authorityName"] );

document.save();
‍‍‍‍‍‍‍‍‍‍‍

The process :
-User upload a document in a general space (this space is accesible for all user of all groups).
-Alfresco launch a inbound rule that execute the previous script.

Other Details:
-the nodebrowser show the follow information of the document :

Permissions
Inherit:   false
Assigned Permission   To Authority     Access
Read              GROUP_GROUP-A-A-A   ALLOWED
Read              GROUP_GROUP-A-A     ALLOWED
Read              GROUP_GROUP-A       ALLOWED‍‍‍‍‍‍

But the problem is that the document is accesible for the users of the GROUP-A-B-A too!.
I believe this behaviour is due that they share the parent top level group (Group-A).
I Hope you can help me.
Many Thanks!

Re: Problem with permissions over groups(behaviour of heritance)

venzia — Fri, 08 May 2009 15:24:32 GMT

hi kalpesh, sorry for not answering before. I see that you have deleted the previous message. anyway that does not solve my problem.
You can test yourself with my example and your comments and check later that the users of the Group-ABA still access the file when it should not be the case.
I tried to create other groups who do not share the parent top level group and in this case can not access the file.
I hope you can help me understand this behavior.
thanks!