topic Re: Enable(give permission) guest to upload content in Alfresco Archive

Enable(give permission) guest to upload content

negi — Wed, 04 Apr 2012 15:53:18 GMT

Hello ,How to enable guest to upload document.case: suppose we have 2 different applications from one application we are just giving the link from where anyone can upload link (link?q=key) of alfresco site.so at the time of uploading we can validate the key of trusted source and upload the document.

Re: Enable(give permission) guest to upload content

wgonzalez — Wed, 04 Apr 2012 17:52:02 GMT

Giving Guest access to upload files in the Repo is not a good practice, so you need to handle your internal validation carefully.
However, you can use the RESTful Login service (/alfresco/service/api/login?u={username}&pw={password?}) to establish a ticket as an Alfresco user.
After you get the authentication ticket, you can use that ticket to execute a javascript webservice that uploads the file.
Sample of such webscript can be found here: http://wiki.alfresco.com/wiki/Web_Scripts_Examples#File_Upload

Hope it helps.

Re: Enable(give permission) guest to upload content

pankajnegi — Thu, 05 Apr 2012 04:21:42 GMT

Thanks wgonzalez,

That's perfectly fine. I have tried this example

in File
upload.get.desc.xml

<webscript>
<shortname>File Upload Form Sample</shortname>
<description>Form for uploading file content and meta-data into Repository</description>
<url>/sample/upload</url>
<authentication>user</authentication>
</webscript>

And

File: upload.post.desc.xml

<webscript>
<shortname>File Upload Sample</shortname>
<description>Upload file content and meta-data into Repository</description>
<url>/sample/upload</url>
<authentication>user</authentication>
</webscript>

Get the ticket

http://localhost:8080/alfresco/service/api/login?u=admin&pw=admin

then use that form

http://localhost:8080/alfresco/service/sample/upload?alf_ticket=TICKET_a985d7ab7d9e101576a149a81d6e03693b48d303

and chose the file and press upload

at that time it ask me for the login authentication(login pop up comes)

so how to assign ticket for the post File: upload.post.desc.xml

Please

Thanks

Re: Enable(give permission) guest to upload content

scouil — Thu, 05 Apr 2012 08:30:09 GMT

I'm not sure it's a good idea to have the password hardcoded and sent out in the clear to get the ticket.

You should have a look at the "runas" property for webscripts as discussed in this topic it might better suit your needs:
https://forums.alfresco.com/en/viewtopic.php?f=36&t=43729