topic Re: Default Guest access to Share? in Alfresco Archive

Default Guest access to Share?

thomasrjones — Tue, 05 Jan 2010 15:03:29 GMT

I have read that years ago the Share product did not allow Guest access.Is this still the case? If not, where do I configure Share to allow such access?Honestly, I really like the Share interface. I think it is a wonderful project….but not allowing anonymous access to "public" projects is a definite

Re: Default Guest access to Share?

opoplawski — Thu, 21 Jan 2010 20:51:13 GMT

I have to agree that this seems to make share useless for producing public sites. What's up?

Re: Default Guest access to Share?

sselvan — Fri, 22 Jan 2010 02:40:05 GMT

I need to customize this for my customer, but could not find any solution for this.

I know there is an issue and seems to be fixed as per the issue history - http://issues.alfresco.com/jira/browse/ETHREEOH-965.
Does anyone know if it is available in latest Alfresco Enterprise v 3.2 (in Share).

Is anybody there, who has a solution for it?

Re: Default Guest access to Share?

opoplawski — Fri, 22 Jan 2010 03:12:26 GMT

That seems like a different issue - logging in/out as guest then logging in as a user and getting an error.

Re: Default Guest access to Share?

sselvan — Fri, 22 Jan 2010 09:40:13 GMT

ok, here is the actual issue
https://issues.alfresco.com/jira/browse/ALFCOM-3783

Looks like it is OPEN!

Re: Default Guest access to Share?

sselvan — Fri, 22 Jan 2010 09:41:54 GMT

oh, sorry - looks like you are the one who opened it yesterday!
Anyway, posted the issue link for everyone's convenience…

Re: Default Guest access to Share?

sselvan — Fri, 22 Jan 2010 09:44:52 GMT

Another question -

Can I actually create an user for Share called guest/guest and give all rights to them for accessing all public assets?
Let me know if that is possible?

Re: Default Guest access to Share?

tommorris — Mon, 08 Mar 2010 22:08:17 GMT

I'm interested in having guest access for Share Sites too.

If it's exposing Share content to the public that you're interested in, then there is an imperfect workaround.

Assuming an example node is 'workspace://SpacesStore/e7016c40-7241-4ebd-8947-89b5b06a72b4'
and that it lives within a Share Site, for example: /'Company Home/Sites/mysite/documentLibrary/graphic.gif'

First add guest access to the content in question. Perhaps with the following code:


permissionService.setPermission(myNodeRef, PermissionService.GUEST_AUTHORITY, PermissionService.CONSUMER, true);
‍‍‍

And then instead of using Share to proxy the content download, i.e.
http://localhost:8080/share/proxy/alfresco/api/node/content/workspace/SpacesStore/e7016c40-7241-4ebd-8947-89b5b06a72b4/graphic.gif

You could use the alfresco service to stream the content back to the browser using the traditional URL (notice 'guest=true' suffix):
http://localhost:8080/alfresco/d/d/workspace/SpacesStore/e7016c40-7241-4ebd-8947-89b5b06a72b4/graphic.gif?guest=true

To keep only the Share webapp exposed to the public, I guess you could write your own simple servlet to proxy onwards from Share to Alfresco.

I'd be interested in hearing a better solution. There must be a few other options. I haven't looked at the Share authentication code yet, but changing that might be a more sensible approach.

Tom
http://www.ixxus.com

Re: Default Guest access to Share?

sselvan — Tue, 09 Mar 2010 03:56:57 GMT

I happenned to notice that in the following two files, I see code like (checking if the user is a guest or not)

"C:\Alfresco\tomcat\webapps\share\WEB-INF\classes\alfresco\site-webscripts\org\alfresco\components\header\header.get.js"
and "C:\Alfresco\tomcat\webapps\share\WEB-INF\classes\alfresco\site-webscripts\org\alfresco\components\header\header.get.html.ftl"(4,7):

"if (!user.isGuest)"‍

<#if !user.isGuest>‍

What if I remove the isGuest check from these file - will I have public access to features in SHARE? Appreciate your opinion on this!

Re: Default Guest access to Share?

tommorris — Wed, 10 Mar 2010 09:27:55 GMT

This is an interesting approach:
http://forums.alfresco.com/en/viewtopic.php?f=47&t=23878
He's created a new user called 'anonymous' and grants them automatic access by wrting an intercepting filter.

Re: Default Guest access to Share?

tommorris — Thu, 15 Apr 2010 13:26:42 GMT

I've got a bit more news on this.

I was looking through the code for 'org.alfresco.web.scripts.servlet.EndPointProxyServlet' and noticed that the logic would allow me to do the following:
http://localhost:8080/share/proxy/alfresco/projectx/tom/test?guest=true&alf_ticket=

A blank ticket would allow my request through the proxy. Authentication still happens, of course. But the request to allow guest access is then picked up.

Just what I need.

Tom
http://www.ixxus.com