topic Re: Permissions, Groups and Roles in Alfresco Archive

Permissions, Groups and Roles

pvaibhav — Thu, 01 Sep 2005 22:02:32 GMT

I looked at the permissions model in WIKI. What is not clear is how Groups and Roles come in the picture.My Idea of permission was very simple - There are set of users and there are set of permissions. Any subset of permissions can be applied to any user or set of users. Every permission has a prede

Re: Permissions, Groups and Roles

andy — Fri, 02 Sep 2005 08:38:50 GMT

Hi

You can assign permissions to groups and roles in exactly the same way as permissions can be assigned to users. The permisson applies to the group. The membership of groups and roles is now encapsulated in the AuthenticationService (to get the static groups and roles of the current authenticated user). If group membership changes this may affect a users permissions.

I have a habbit of calling username, groups and role authorities in the acegi way.

Actions on services may be configured to require certain permissions, role membership etc.

I hope this answers your question.

Regards

Andy

Re: Permissions, Groups and Roles

renga — Mon, 11 Dec 2006 11:46:06 GMT

I do have a follow-up question on the same context.

My requirement is, i want to have role/permission which can only move content from home space to other space. If i chose to give Write permission it is allowing the Add/Create content , which i don't want to give.

Any help on this lines?

Thanks.

Re: Permissions, Groups and Roles

andy — Fri, 22 Dec 2006 11:52:37 GMT

Hi

You would have create a move permission and protect the appropriate move methods in the public-services-security-context.xml. You should assign this MOVE permission to your own own permission group (like editor). The pattern should be clear from the configuration files.

Regards

Andy

Re: Permissions, Groups and Roles

gnewtonaus — Wed, 02 May 2007 07:07:11 GMT

Hi,

I have a fresh install of Alfresco (2.0.0 build 185) and I'm trying to set up a read-only situation for a group of users - one would think a fairly simple thing to do.

I've created a person who is a member of GROUP_EVERYONE (a default group?) which I've given the role Consumer on the Company Home space. Consumer appears to be the lowest level of permissions?

When I login as the new user and go into the space I'm still getting the two menu's at the top as follows:-

Create
- Content
- Space
- Advanced Space Wizard

More Actions
- Cut
- Paste All
- Manage Space…
- Manage Content Rules..

and alongside each item…
Actions
- Copy
- Start Advanced Workflow

A read-only user shouldn't be able to any of these things. I want to turn them off!

I've spent a couple hours going through the wiki and forums etc.. and I can't find a simple answer, only complex answers that don't even seem to address this? We have an Enterprise support license but I don't know how to get support apart from here.

Any help would be most appreciated.

Regards,
Greg Newton
Sydney, Australia

Re: Permissions, Groups and Roles

andy — Mon, 17 Sep 2007 10:08:55 GMT

Hi

Check inherited permissions and check who owns the folder. Both these routes can give additional access to that specificially set on the node. Does the user have admin rights?

Andy

Re: Permissions, Groups and Roles

einreb301986 — Fri, 05 Feb 2010 17:21:03 GMT

Hi, I have my on post regarding adding permissions using web scripts. You can visit my blog, but its not yet finish..haha… Will update it soon

http://anythingalfresco.wordpress.com/2010/02/05/adding-alfresco-permissions-using-webscripts/

@gnewtonaus
By default, GROUP_EVERYONE has a Consumer Role assigned to it in any space. If you created a new user and use Company Home as its Home Page and not User homes, then you will be getting those kinds of menus activated.

Re: Permissions, Groups and Roles

kishorevreddy — Fri, 12 Jun 2015 04:53:54 GMT

I need to send out an invite to 1000+ users. I am currenlty working on ver 4.2. Pls let know how can I send a bulk invite to all these users at one go.

Also, how to set default permission as Consumer for all these users.