topic Authentication during bootstrap in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/authentication-during-bootstrap/m-p/212038#M165168 <HTML><HEAD></HEAD><BODY><SPAN>I'm trying to programatically bootstrap some users and groups in alfresco during startup. I'm using an example from the Jeff Potts developer guide. </SPAN><BR /><BR /><SPAN>This is the class:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />package com.someco.module;<BR /><BR />import java.io.Serializable;<BR />import java.util.HashMap;<BR />import java.util.Map;<BR /><BR />import javax.transaction.UserTransaction;<BR /><BR />import org.alfresco.model.ContentModel;<BR />import org.alfresco.service.cmr.security.AuthenticationService;<BR />import org.alfresco.service.cmr.security.AuthorityService;<BR />import org.alfresco.service.cmr.security.AuthorityType;<BR />import org.alfresco.service.cmr.security.PersonService;<BR />import org.alfresco.service.namespace.QName;<BR />import org.alfresco.service.transaction.TransactionService;<BR />import org.apache.log4j.Logger;<BR /><BR />public class BootstrapAuthorityCreator {<BR />&nbsp;&nbsp;&nbsp;private AuthorityService authorityService;<BR />&nbsp;&nbsp;&nbsp; private PersonService personService;<BR />&nbsp;&nbsp;&nbsp; private TransactionService transactionService;<BR />&nbsp;&nbsp;&nbsp; private AuthenticationService authenticationService;<BR />&nbsp;&nbsp;&nbsp; private UserTransaction tx;<BR />&nbsp;&nbsp;&nbsp; private static Logger logger = Logger.getLogger(BootstrapAuthorityCreator.class);<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp; public void init() throws Exception {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;String salesGroup;<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;String marketingGroup;<BR />&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;tx = transactionService.getUserTransaction();<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; tx.begin();<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;// create tuser1, tuser2, tuser3, tuser4<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; if(!authenticationService.authenticationExists("tuser1")) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;authenticationService.createAuthentication("tuser1", "password".toCharArray());<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if (logger.isDebugEnabled()) logger.debug("Created tuser1 auth");<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; if (!personService.personExists("tuser1")) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;personService.createPerson(createDefaultProperties("tuser1", "Test", "User1", "tuser1@localhost", "password"));<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if (logger.isDebugEnabled()) logger.debug("Created tuser1 person");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;}<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; if(!authenticationService.authenticationExists("tuser2")) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;authenticationService.createAuthentication("tuser2", "password".toCharArray());<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if (logger.isDebugEnabled()) logger.debug("Created tuser2 auth");<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<BR /><BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;if (!personService.personExists("tuser2")) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;personService.createPerson(createDefaultProperties("tuser2", "Test", "User2", "tuser2@localhost", "password"));<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if (logger.isDebugEnabled()) logger.debug("Created tuser2 person");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;}<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; if(!authenticationService.authenticationExists("tuser3")) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;authenticationService.createAuthentication("tuser3", "password".toCharArray());<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if (logger.isDebugEnabled()) logger.debug("Created tuser3 auth");<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<BR /><BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;if (!personService.personExists("tuser3")) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;personService.createPerson(createDefaultProperties("tuser3", "Test", "User3", "tuser3@localhost", "password"));<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if (logger.isDebugEnabled()) logger.debug("Created tuser3 person");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;}<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; if(!authenticationService.authenticationExists("tuser4")) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;authenticationService.createAuthentication("tuser4", "password".toCharArray());<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if (logger.isDebugEnabled()) logger.debug("Created tuser4 auth");<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<BR /><BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;if (!personService.personExists("tuser4")) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;personService.createPerson(createDefaultProperties("tuser4", "Test", "User4", "tuser4@localhost", "password"));<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if (logger.isDebugEnabled()) logger.debug("Created tuser4 person");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;}<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;if (authorityService.authorityExists(authorityService.getName(AuthorityType.GROUP, "sales"))) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;salesGroup = authorityService.getName(AuthorityType.GROUP, "sales");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;} else {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;// create the sales group<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;salesGroup = authorityService.createAuthority(AuthorityType.GROUP, "sales");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;}<BR /><BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;//add tuser1 and tuser2 to the sales group<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;authorityService.addAuthority(salesGroup, "tuser1");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;authorityService.addAuthority(salesGroup, "tuser2");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;if (authorityService.authorityExists(authorityService.getName(AuthorityType.GROUP, "marketing"))) {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;marketingGroup = authorityService.getName(AuthorityType.GROUP, "marketing");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;} else {<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;// create the marketing group<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;marketingGroup = authorityService.createAuthority(AuthorityType.GROUP, "marketing");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;}<BR /><BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;//add tuser3 and tuser4 to the marketing group<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;authorityService.addAuthority(marketingGroup, "tuser3");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;authorityService.addAuthority(marketingGroup, "tuser4");<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;<BR />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;tx.commit();<BR /><BR />&nbsp;&nbsp;&nbsp; }<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp; private Map&lt;QName, Serializable&gt; createDefaultProperties(String userName, String firstName, String lastName,<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; String email, String password) {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HashMap&lt;QName, Serializable&gt; properties = new HashMap&lt;QName, Serializable&gt;();<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; properties.put(ContentModel.PROP_USERNAME, userName);<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; properties.put(ContentModel.PROP_FIRSTNAME, firstName);<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; properties.put(ContentModel.PROP_LASTNAME, lastName);<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; properties.put(ContentModel.PROP_EMAIL, email);<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; properties.put(ContentModel.PROP_PASSWORD, password);<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; return properties;<BR />&nbsp;&nbsp;&nbsp; }<BR /><BR />&nbsp;&nbsp;&nbsp;public void setAuthorityService(AuthorityService authorityService) {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;this.authorityService = authorityService;<BR />&nbsp;&nbsp;&nbsp;}<BR /><BR />&nbsp;&nbsp;&nbsp;public void setPersonService(PersonService personService) {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;this.personService = personService;<BR />&nbsp;&nbsp;&nbsp;}<BR /><BR />&nbsp;&nbsp;&nbsp;public void setTransactionService(TransactionService transactionService) {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;this.transactionService = transactionService;<BR />&nbsp;&nbsp;&nbsp;}<BR /><BR />&nbsp;&nbsp;&nbsp;public void setAuthenticationService(AuthenticationService authenticationService) {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;this.authenticationService = authenticationService;<BR />&nbsp;&nbsp;&nbsp;}<BR />}<BR /><BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>The init method fails since there is no authenticated user. Is the only way to do this to call the authenticate method with hardcoded username and password?</SPAN></BODY></HTML> Wed, 17 Feb 2010 15:33:00 GMT billerby 2010-02-17T15:33:00Z Authentication during bootstrap https://connect.hyland.com/t5/alfresco-archive/authentication-during-bootstrap/m-p/212038#M165168 I'm trying to programatically bootstrap some users and groups in alfresco during startup. I'm using an example from the Jeff Potts developer guide. This is the class<IMG id="smileytongue" class="emoticon emoticon-smileytongue" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" />ackage com.someco.module;import java.io.Serializable;import java.util.HashMap;import java.util.Map;import javax.transaction.UserTrans Wed, 17 Feb 2010 15:33:00 GMT https://connect.hyland.com/t5/alfresco-archive/authentication-during-bootstrap/m-p/212038#M165168 billerby 2010-02-17T15:33:00Z Re: Authentication during bootstrap https://connect.hyland.com/t5/alfresco-archive/authentication-during-bootstrap/m-p/212039#M165169 <HTML><HEAD></HEAD><BODY><SPAN>Try wrapping the code in AuthenticationUtil.runAs(), passing in AuthenticationUtil.getSystemUserName(). The system user can do anything he wants (so be very careful that you aren't introducing a security hole).</SPAN></BODY></HTML> Mon, 01 Mar 2010 12:33:17 GMT https://connect.hyland.com/t5/alfresco-archive/authentication-during-bootstrap/m-p/212039#M165169 dward 2010-03-01T12:33:17Z Re: Authentication during bootstrap https://connect.hyland.com/t5/alfresco-archive/authentication-during-bootstrap/m-p/212040#M165170 <HTML><HEAD></HEAD><BODY><SPAN>Thanks, you will get a point for that one <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://connect.hyland.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /></SPAN></BODY></HTML> Wed, 03 Mar 2010 14:32:24 GMT https://connect.hyland.com/t5/alfresco-archive/authentication-during-bootstrap/m-p/212040#M165170 billerby 2010-03-03T14:32:24Z