topic Re: Granular Permission Rights in Alfresco Archive

Granular Permission Rights

ottopodo — Mon, 21 Nov 2011 14:39:13 GMT

I had Granular Permission Rights enabled in our 3.4 installation according to this article (http://keytocontent.blogspot.com/2011/04/accessing-granular-permission-rights.html).I see that in 4.0 Alfresco changed configuration without care about migration problems.I'm trying to figure out how to chang

Re: Granular Permission Rights

ottopodo — Mon, 21 Nov 2011 15:58:32 GMT

I reply to my question…
I jus replaced
        <!– Manage permissions (site roles) –>
         <action id="document-manage-site-permissions" type="javascript" icon="document-manage-permissions" label="actions.document.manage-permissions">
            <param name="function">onActionManagePermissions</param>
            <permissions>
               <permission allow="true">ChangePermissions</permission>
            </permissions>
            <evaluator>evaluator.doclib.action.siteBased</evaluator>
         </action>

with

          <!– Manage permissions (site roles) –>
         <action id="document-manage-site-permissions" type="pagelink" icon="document-manage-permissions" label="actions.document.manage-permissions">
            <param name="page">manage-permissions?nodeRef={node.nodeRef}</param>
            <permissions>
               <permission allow="true">ChangePermissions</permission>
            </permissions>
            <evaluator negate="true">evaluator.doclib.action.siteBased</evaluator>
         </action>

and now I have granular permission Rights as in repository.
Marco

Re: Granular Permission Rights

mikeh — Mon, 21 Nov 2011 16:32:48 GMT

I see that in 4.0 Alfresco changed configuration without care about migration problems.

Somewhat harsh. There are lots of developer blogs at http://blogs.alfresco.com/ regarding the new extensibility features of both Surf and the Document Library. We also recently held two 2-day DevCons where people could come and talk to the engineering team directly about issues such as code migration.

Here's my entry on the new Document Library extension points: http://blogs.alfresco.com/wp/mikeh/2011/09/26/share-document-library-extensions-in-v4-0/

As much as we'd like to, it's impractical to provide a "step-by-step" guide as each customisation will be completely different.

Thanks,
Mike

Re: Granular Permission Rights

ottopodo — Mon, 21 Nov 2011 16:42:49 GMT

Thank you Mike,
I will go through your article and other resources.
Sorry if I was a little bit hard.
But please consider that not all the projects have resources to rewrite everything and that if migrations become complex they reopen evaluation phase, alternative solutions evaluation…I think that also a soft migration process is a great feature.

Marco

Re: Granular Permission Rights

yatin — Wed, 14 Mar 2012 08:31:32 GMT

Hi ottopodo

i tried exactly the same thing but after making the changes to the share-documentlibrary-config.xml file, i cant see the option to Manage Permissions on my Sites anymore? i am using Alfresco 4.0.c. Any idea?

Re: Granular Permission Rights

chris_toselli — Fri, 16 Mar 2012 01:47:58 GMT

Hi ottopodo

I've had the same result as yatin. I made that change to share-documentlibrary-config.xml and it's removed the ability to manage permissions. I'm also using 4.0.c. Thanks again for this post - this has been something that I have been wanting to do for a long time

Thanks

Re: Granular Permission Rights

mmtman — Fri, 16 Mar 2012 14:38:45 GMT

Just remove: negate="true" from the evaluator line and then it works fine.

So, this line

<evaluator negate="true">evaluator.doclib.action.siteBased</evaluator>‍

should look like this

<evaluator>evaluator.doclib.action.siteBased</evaluator>‍

Re: Granular Permission Rights

mmtman — Fri, 16 Mar 2012 19:20:09 GMT

What I posted above works for when you want to click on Manage Permissions and get the granular permissions as you would in the repository, but another thing yet to change is when clicking on the little icon in the Permissions section on the right-side of the document details page. I don't yet know how to make this button redirect to the granular permissions for the document.

It should be possible because you can change the document-details in the URL to manage-permissions and then you're directed to the granular permissions. The problem, from what I can tell so far, is that the little icon in the Permissions section executes some sort of JavaScript to create the little dialog that comes up. If anyone can help out with how to override this that'd be great.

In the meantime, I just moved the document-permissions.get.js (located in your tomcat directory at: webapps/share/WEB-INF/classes/alfresco/site-webscripts/org/alfresco/components/document-details) to document-permissions.get.js.bak and then the Permissions section on the document details page is no longer visible. The Manage Permissions option is still available at the top of the page and works as expect when following the modifications in these posts.

Re: Granular Permission Rights

chris_toselli — Tue, 20 Mar 2012 02:40:25 GMT

Hi mmtman

Thanks for posting that - that worked great.

Re: Granular Permission Rights

wabson — Tue, 20 Mar 2012 09:28:28 GMT

The 'Manage Permissions' link itself is rendered by the document-permissions.get.html.ftl file, but if you look at the anchor tag you'll notice that it has no 'href' attribute. Instead, the onclick behaviour is implemented by the onManagePermissionsClick() method of the class Alfresco.DocumentPermissions (JavaScript docs).

The link element is associated to that method via its 'name' attribute, on the following line.

<a href="#" name=".onManagePermissionsClick" class="${el} edit" title="${msg("label.edit")}"> </a>‍

So, if you want to remove the JavaScript behaviour, simply remove the 'name' attribute, or change its value to something else.

That will leave a link that does nothing when clicked, so it's better if you change its behaviour. You could add a new prototype method to Alfresco.DocumentPermissions and bind that to the link to implement some custom JavaScript behaviour, but it's easier by far in this instance to simply change the link's 'href' attribute value to point to the Manage Permissions page.

<a href="manage-permissions?nodeRef=${nodeRef?html}" class="${el} edit" title="${msg("label.edit")}"> </a>‍

The FTL file can be found in tomcat/webapps/share/classes/alfresco/site-webscripts/org/alfresco/components/document-details, but rather than updating it in-place you should copy it into the directory tomcat/shared/classes/alfresco/web-extension/site-webscripts/org/alfresco/components/document-details (after creating this folder structure if necessary) and update it there.

Lastly, an even better method (say, if you wanted to install this across multiple environments) would be to use a Share Extensibility module to override the component's FTL (or to remove the component completely from the page). See the archives of Dave Draper's blog at http://blogs.alfresco.com/wp/ddraper/ for more information.

Cheers,
Will