<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic FIXED and GLOBAL ACLs in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/fixed-and-global-acls/m-p/262551#M215681</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Reading "Professional Alfresco…" by Caruana, Newton, Farman, et. al., there is mention of four classifications of ACL (pg 120) : DEFINING, SHARED, FIXED, GLOBAL.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;However, the text only describes in some detail how ACL inheritance works with DEFINING and SHARED ACLs.&amp;nbsp; It devotes only a few sentences (pg 121) to a high-level description of FIXED and GLOBAL ACLs, with no further implementation, example or usage details I could find.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Is there any reference on how to define and use these FIXED and GLOBAL ACLs?&amp;nbsp; I think I would like to leverage them to explicitly define the ACL on some objects – typically Folders – such that I have a direct way of defining the precise ACL for that level of the repository tree…at least at that object.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I would basically be fine with ACL inheritance for the most-part.&amp;nbsp; Just would like to be able to explicitly set an ACL where necessary (by name, because it's very convenient and straightforward).&amp;nbsp; If that's in the middle of a folder-tree, I guess I'd have to figure out whether Alfresco would re-propagate the ACL to all the sub-objects…but that's getting ahead of the main question.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks for any guidance/pointers.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;-AJ&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Wed, 04 Jul 2012 14:31:29 GMT</pubDate>
    <dc:creator>aweber1nj</dc:creator>
    <dc:date>2012-07-04T14:31:29Z</dc:date>
    <item>
      <title>FIXED and GLOBAL ACLs</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/fixed-and-global-acls/m-p/262551#M215681</link>
      <description>Reading "Professional Alfresco…" by Caruana, Newton, Farman, et. al., there is mention of four classifications of ACL (pg 120) : DEFINING, SHARED, FIXED, GLOBAL.However, the text only describes in some detail how ACL inheritance works with DEFINING and SHARED ACLs.&amp;nbsp; It devotes only a few sentences (</description>
      <pubDate>Wed, 04 Jul 2012 14:31:29 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/fixed-and-global-acls/m-p/262551#M215681</guid>
      <dc:creator>aweber1nj</dc:creator>
      <dc:date>2012-07-04T14:31:29Z</dc:date>
    </item>
    <item>
      <title>Re: FIXED and GLOBAL ACLs</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/fixed-and-global-acls/m-p/262552#M215682</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hello,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;ACLs of types DEFINING and SHARED are the major players in the standard Alfresco DM repository. I don't even know if it is possible to use FIXED / GLOBAL ACLs without writing your own DAO / SQL code, as the Alfresco permission services and ACL DAOs fully abstract from the internals of ACLs. As a professional Alfresco developer / architect of several years, I personally wouldn't dare to try and fiddle with this kind of internals - I have already spent too much time and sanity just wrapping my head around the dynamics of ACLs (not the static and thus simple analysis of SHARED / DEFINING, but how they interact during modification) when analyzing permission bugs. Just thinking of the maintenance / upgrade effort makes me sick. Sooner would I implement my own ACL management component…&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;For any practical use case, you should not need to work with ACLs directly. The PermissionService provides everything you ever need in 99.9 % of all use cases.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Regards&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Axel&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 10 Jul 2012 22:36:53 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/fixed-and-global-acls/m-p/262552#M215682</guid>
      <dc:creator>afaust</dc:creator>
      <dc:date>2012-07-10T22:36:53Z</dc:date>
    </item>
  </channel>
</rss>

