topic Re: Preventing access to all Alfresco users during site invite in Alfresco Archive

Preventing access to all Alfresco users during site invite

kamielvdz — Tue, 12 Apr 2011 14:08:55 GMT

I want to configure Alfresco a certain way and I can't seem to find how I could achieve this without completly rewriting the inivitation page of Share, but by using permissions and groups.What I want to achieve is that when a Site Manager invites users for its site he or she can only choose from a l

Re: Preventing access to all Alfresco users during site invite

michaelc — Tue, 12 Apr 2011 18:12:56 GMT

I don't understand everything your wanting.
what is your filter criteria for the list of users ?

all of the functionality of the invite is found in
tomcat\webapps\share\WEB-INF\classes\alfresco\site-webscripts\org\alfresco\components\invite

I think what you want may be in invitationlist.get.js

Re: Preventing access to all Alfresco users during site invite

kamielvdz — Wed, 13 Apr 2011 13:10:41 GMT

E.g. I have 2 customers. Customer A and Customer B.

Each of these customers has 1 manager and multiple other users.

I want to prevent Customer Manager A from viewing users from Customer B during the invite process.

Your suggestion of modifying invitationlist.get.js is indeed a good suggestion and what I am implementing now, but I want to make sure at no point nowhere a user from Customer A will be able to see details of a user of Customer B.

I was just wondering if permissions couldn't be the solution here. Just to avoid extending code if it is not necessary.

Re: Preventing access to all Alfresco users during site invite

michaelc — Wed, 13 Apr 2011 18:03:01 GMT

You would need to also make the same modifications to the people-finder.
this get's tricky as you could then have ghost users that have not been assigned to a group or b group and no one could see them.

except the system admin and I would not change that process or you could have a real problem with not seeing users.

So what happens if someone is a manager of more then one site ?

Re: Preventing access to all Alfresco users during site invite

kamielvdz — Thu, 14 Apr 2011 07:13:39 GMT

The idea of the ghost users doesn't scare me much. We are not looking at a upscaling this to hundreds of users, so it will be maintainable using a general administrator.

If a manager manages more than 1 site there is indeed a possibility of cross over and attaching users from A to site B, but this is the managers responsibility. He/she has the rights to see both these user groups.

Thanks for your thoughts, I think I will be extending the people finder as well.