topic Re: Possible bug? in Alfresco Archive

Possible bug?

steel — Mon, 06 Mar 2006 22:58:51 GMT

File: ACLEntryVoter.javaFunction: public int vote(Authentication, Object, Config){}Issue: return authorityService.getAuthorities().contains(cad.authority) ? AccessDecisionVoter.ACCESS_GRANTED : AccessDecisionVoter.ACCESS_DENIED;‍‍Multiple acl parameters of type ACL_METHOD

Re: Possible bug?

andy — Tue, 07 Mar 2006 12:37:01 GMT

Hi

You are correct. Only one ACL_METHOD.<AUTHORITY> entry is expected.
You could avoid the issue by creating a group of users allowed to execute the method. "GROUP_User Managers" and include admins as things stand!

The other forms ACL_NODE for example are all "anded" together.

I will raise this as an issue.

However, the control is against the user having an *authority* membership (username, group) NOT a permission or group of permissions. The ROLE_ADMINISTRATOR is an authority used for global administrators.

The code could also check if a user has a global permission. It does not.
I will add this as a request. Apologies, for some reason I thought that it did.

http://www.alfresco.org/jira/browse/AR-473
http://www.alfresco.org/jira/browse/AR-474

Regards

Andy

Re: Possible bug?

steel — Tue, 07 Mar 2006 15:25:07 GMT

Great.
I do understand that the ACL is for authority membership, I just typed it incorrectly.

Re: Possible bug?

andy — Fri, 27 Oct 2006 15:15:45 GMT

Hi

More than one ACL_METHOD entry is now supported.

One or more authorities specified by the ACL_METHOD entries must be present for the user trying to invoke the method.

Global permissions are not supported as part of ACL_METHOD and on reflection this does not make much sense.

Regards

Andy

Re: Possible bug?

steel — Fri, 27 Oct 2006 16:03:35 GMT

Hi

More than one ACL_METHOD entry is now supported.

One or more authorities specified by the ACL_METHOD entries must be present for the user trying to invoke the method.

Global permissions are not supported as part of ACL_METHOD and on reflection this does not make much sense.

Regards

Andy

Excellent! Thank You.