topic Re: Create new administrator role. Only manage users in Alfresco Archive

Create new administrator role. Only manage users

dara — Thu, 14 Jan 2010 12:45:04 GMT

Hello!!!!!I need help about creation roles!I want to create a new administrator role. He only can manage user and groups and manage space users(ChangePermissions). He can't view the documents stored in Alfresco.My Alfresco version is comunnity 2.1.0. I hope explain well, because i don't know Englis

Re: Create new administrator role. Only manage users

invictus9 — Thu, 14 Jan 2010 20:15:31 GMT

You can't directly create such a role in Alfresco today. Alfresco does not have a tiered or delegated security role model, such as would be found in enterprise systems.

It is possible to create an Alfresco application that can be run by a non-administrator (with permission) that will manage users and groups. It might be done as a Java-backed web script that escalated privileges for the application to manage those types of nodes, and replicated the Alfresco user interface.

Here is another method that might be more feasible for you. If you authenticate your Alfresco users against LDAP or Active Directory, and you have an identity management application to allow you to configure users and groups, then you would have solved most of your problem. Managing space users from a non-admin account might require a Java-backed web script.

Re: Create new administrator role. Only manage users

dara — Mon, 18 Jan 2010 16:06:27 GMT

Thank you so much Invictus9, but i don't undertand very well. I think that could be possible created a new role for example Administrator2 in PermissionsDefinition.xml, with only permission ChangePermissions(this permission let to manage spaces) and something more that allow to create users and groups, but i don't find nothing to because the user always can view the documents. Is not it possible, in this way??

Do you send me any example about that you tell me in the last post??

Other solution can be migrate Alfresco to a higher version than 2.1??

Thank you so so much

Re: Create new administrator role. Only manage users

invictus9 — Mon, 18 Jan 2010 21:23:56 GMT

My apologies if I gave the impression that I am adept with Alfresco. I am not. I have done a lot of reading and am doing configuring and exploration and some programming. I know some of the things that are possible.

I am not clear how you add permissions such that you remove permissions, if you get my meaning. All permission sets seem to be additive, so if you want to remove permissions, you need to start with very restricted permissions until you get just the ones you want.

This is the page that I have been reading to try to understand the issue:

http://wiki.alfresco.com/wiki/Security_and_Authentication