topic User Impersonation in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/user-impersonation/m-p/235603#M188733 <HTML><HEAD></HEAD><BODY><SPAN>Hi there</SPAN><BR /><BR /><SPAN>I would like to be able to perform CMIS actions against Alfresco as an impersonated user. I am aware that CMIS does not specify any functionality re user impersonation. I was hoping to achieve something like this:</SPAN><BR /><BR /><UL><LI>Login to Alfresco via REST API or Web Script as the admin.</LI><BR /><LI>Impersonate the target user</LI><BR /><LI>Create a login ticket for the target user</LI><BR /><LI>Execute a CMIS service method (e.g. getChildren()) against Alfresco using the target user's username and login ticket</LI></UL><SPAN>I'd like to do this so that users can login to my webapp, click a button in it and this will trigger a CMIS method. My app utilises Kerberos authentication via Spring Security so I would have the authenticated username but no password.</SPAN><BR /><BR /><SPAN>The questions that I have are:</SPAN><BR /><BR /><UL><LI>Does the REST API provide a getLoginticketForUser() type method? If not then I guess I'll have to create a WebScript to do this via AuthenticationUtil.setCurrentUser().</LI><BR /><LI>Can I pass login tickets instead of the password to Alfresco's CMIS service?</LI></UL><SPAN>Thanks</SPAN></BODY></HTML> Tue, 03 Aug 2010 10:39:24 GMT ukdavo 2010-08-03T10:39:24Z User Impersonation https://connect.hyland.com/t5/alfresco-archive/user-impersonation/m-p/235603#M188733 Hi thereI would like to be able to perform CMIS actions against Alfresco as an impersonated user. I am aware that CMIS does not specify any functionality re user impersonation. I was hoping to achieve something like this:Login to Alfresco via REST API or Web Script as the admin.Impersonate the targe Tue, 03 Aug 2010 10:39:24 GMT https://connect.hyland.com/t5/alfresco-archive/user-impersonation/m-p/235603#M188733 ukdavo 2010-08-03T10:39:24Z Re: User Impersonation https://connect.hyland.com/t5/alfresco-archive/user-impersonation/m-p/235604#M188734 <HTML><HEAD></HEAD><BODY><SPAN>I just noticed in Jeff Pott's CMIS article (</SPAN><A href="http://ecmarchitect.com/archives/2009/11/23/1094" rel="nofollow noopener noreferrer">http://ecmarchitect.com/archives/2009/11/23/1094</A><SPAN>) that Alfresco's CMIS implementation can accept basic auth or Alfresco tickets. I also found a blog post that discusses how to get an Alfresco ticket via web script (</SPAN><A href="http://fabiostrozzi.eu/?p=24" rel="nofollow noopener noreferrer">http://fabiostrozzi.eu/?p=24</A><SPAN>).</SPAN></BODY></HTML> Tue, 03 Aug 2010 15:19:16 GMT https://connect.hyland.com/t5/alfresco-archive/user-impersonation/m-p/235604#M188734 ukdavo 2010-08-03T15:19:16Z