topic CMIS ACL problem/question [SOLVED] in Alfresco Archive

CMIS ACL problem/question [SOLVED]

nickdegraeve — Wed, 05 Dec 2012 07:59:50 GMT

HiI'm trying to figure out how to use the CMIS Java API, in particular ACLs, but I run into a "CmisPermissionDeniedException: Forbidden" when I try to manipulate a document as a non-Administrator user.I have an Alfresco Community v4.2.0 (4428) schema 6019 running with an extra user called "user". I'

Re: CMIS ACL problem/question [SOLVED]

jpotts — Sat, 08 Dec 2012 06:42:24 GMT

If you look at the permission mapping in the result of calling getRepositoryInfo, you'll see something like this:

<cmis:mapping>
  <cmis:key>canCheckout.Document</cmis:key>
  <cmis:permission>cmis:all</cmis:permission>
  <cmis:permission>{http://www.alfresco.org/model/content/1.0}lockable.CheckOut</cmis:permission>
</cmis:mapping>‍‍‍‍‍

This tells you that if you want your test user to be able to check out a document, you need to assign the "cmis:all" permission. If you do that, your user will be able to successfully perform a checkout.

So if you are writing an interoperable client, before setting the ACL, check the permission mapping, then set the ACL to the correct CMIS permission.

Jeff

Re: CMIS ACL problem/question [SOLVED]

nickdegraeve — Mon, 10 Dec 2012 08:38:34 GMT

Thanks for the help.

I was able to do it like this:

RepositoryInfo repositoryInfo = session.getRepositoryInfo();
AclCapabilities aclCapabilities = repositoryInfo.getAclCapabilities();
Map<String, PermissionMapping> permissionMappings = aclCapabilities.getPermissionMapping();
PermissionMapping permissionMapping = permissionMappings.get(PermissionMapping.CAN_CHECKOUT_DOCUMENT);
List<String> permissions = permissionMapping.getPermissions();
Ace addAce = session.getObjectFactory().createAce(principal, permissions);
List<Ace> addAces = new LinkedList<Ace>();
addAces.add(addAce);
document.addAcl(addAces, AclPropagation.REPOSITORYDETERMINED);‍‍‍‍‍‍‍‍‍

Re: CMIS ACL problem/question [SOLVED]

joyola83 — Tue, 26 May 2015 18:39:58 GMT

Is possible to set a role (administrator or contributor) to a Group via CMIS?