topic Re: Permissions in alfresco vs share in Alfresco Archive

Permissions in alfresco vs share

cybertoast — Wed, 16 Dec 2009 13:25:54 GMT

I don't understand how /share and /alfresco permissions interact. I've got a case where I want to have a admin group be able to have full access to all /share sites. I created a site (SiteA) as a user (userB) in /share. I then go to /alfresco as admin and invite a specific group (groupA) with Site M

Re: Permissions in alfresco vs share

gronfelt — Fri, 18 Dec 2009 08:47:26 GMT

I'm not sure I understand your example correctly, perhaps there´s some mixup between usernames in it? If you use userB to create a site, that would make userB Site Manager, not consumer.

However, I'll try to provide some answers anyway:

Inviting users in the Explorer interface (/alfresco) doesn't actually make them a member of the Site, it only overrides document permissions. Site membership levels are normally set in Share, you could then override the permissions on specific documents or folders by inviting users to another level in the Explorer interface.

One example:
I normally set my users as Collaborators in Share. However, this means that they cannot remove documents owned by another user, only the Site Manager could to this. Since I wan't them to be able to do this, I invite the users as Coordinators (which corresponds to Site Manager when it comes to document permissions) in the documentLibrary space in Explorer. Now the users have full permissions on all documents and folders, but they are not Site Managers, so they can not perform Share specific actions like reconfiguring the Site.

For your final question, you could use a simple javascript in Explorer to change user's roles in Share:

var site = siteService.getSite("sitename");
site.setMembership("username", "siteManager")‍‍

Put it in Data Dictionary > Scripts (with the extension .js) and run it by selecting Run Action on the Document Details page for any document (it doesn't matter which file, since you're not doing anything to the document itself).

Re: Permissions in alfresco vs share

cybertoast — Mon, 21 Dec 2009 17:35:24 GMT

Thanks much gronfelt.

Re: Permissions in alfresco vs share

sheahen — Fri, 29 Jan 2010 21:09:53 GMT

I am interested in this issue as well. While experimenting with /Alfresco and /Share, I deleted a user that had been the site manager for a site. It then seemed impossible to give anyone site manager permissions once this was done, even though the site was still there. I tried the script you posted from an admin user, but still got an error - is it possible to designate a site manager from an admin script if the admin is not a site manager? Or could the site be copied with new permissions perhaps? Or maybe I just ran the script wrong…I replaced "sitename" with the site name and "username" with the user name I wanted to make site manager.

Here was the error:
Failed to run Actions due to error: 00290020 Failed to execute script 'workspace://SpacesStore/ce47dab8-2017-471f-9fa3-f18bb5dc1741': 00290019 An authority was not found for GROUP_site_IntranetDesign_siteManager

My concern is that I want to be able to over-ride and fix problems like this from admin if an employee leaves or botches his/her settings. I appreciate very much any insight you can give!

Re: Permissions in alfresco vs share

cybertoast — Mon, 01 Feb 2010 22:05:30 GMT

It seems like if you log in as an admin user you can take ownership of the site. Then you can assign permissions to whatever you want on the site. At least this working in my one experiment.

Re: Permissions in alfresco vs share

gronfelt — Mon, 22 Feb 2010 08:53:31 GMT

I am interested in this issue as well. While experimenting with /Alfresco and /Share, I deleted a user that had been the site manager for a site. It then seemed impossible to give anyone site manager permissions once this was done, even though the site was still there. I tried the script you posted from an admin user, but still got an error - is it possible to designate a site manager from an admin script if the admin is not a site manager? Or could the site be copied with new permissions perhaps? Or maybe I just ran the script wrong…I replaced "sitename" with the site name and "username" with the user name I wanted to make site manager.

Here was the error:
Failed to run Actions due to error: 00290020 Failed to execute script 'workspace://SpacesStore/ce47dab8-2017-471f-9fa3-f18bb5dc1741': 00290019 An authority was not found for GROUP_site_IntranetDesign_siteManager

My concern is that I want to be able to over-ride and fix problems like this from admin if an employee leaves or botches his/her settings. I appreciate very much any insight you can give!

I've recently run in to the same problem, which is kind of odd, because I've not had any problems with this before. I don't know if it's related to a specific site or if it's an issue with 3.2r2, which I recently upgraded to.

Re: Permissions in alfresco vs share

tommorris — Thu, 04 Mar 2010 22:42:51 GMT

Have you tried upper-casing the first letter?
I noticed that I have to exectute (in 3.2.0e): site.setMembership("username", "SiteManager")
rather than: site.setMembership("username", "siteManager")
my full group names seem to refelect this also.