topic Rules and user permissions in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/rules-and-user-permissions/m-p/263386#M216516 <HTML><HEAD></HEAD><BODY><SPAN>Hello everyone,</SPAN><BR /><BR /><SPAN>I am testing the rules in folders and I came across the following problem: </SPAN><BR /><BR /><SPAN>Say I use a rule to a folderA for a contributor (userA) to submit a document for review. This rule would move the document to folderB and notify userB (site manager) to review it. In order for the rule to work, userA must have at least </SPAN><EM>contributor</EM><SPAN> rights in folderB (else you get an error that the rule cannot be applied because the document cannot move to this folder).</SPAN><BR /><BR /><SPAN>The document indeed is moved to folderB and userB is indeed notified via email. Yet (and this is my problem) userA, being a contributor to folderB, has adequate permissions to view the contents of folderB and even run the rule applied to this folder to approve the document! (which only userB is supposed to be able to do).</SPAN><BR /><BR /><SPAN>How do I restrict the rule in folderB so that only userB can run it?</SPAN></BODY></HTML> Sat, 22 Sep 2012 10:30:46 GMT vassilisx 2012-09-22T10:30:46Z Rules and user permissions https://connect.hyland.com/t5/alfresco-archive/rules-and-user-permissions/m-p/263386#M216516 Hello everyone,I am testing the rules in folders and I came across the following problem: Say I use a rule to a folderA for a contributor (userA) to submit a document for review. This rule would move the document to folderB and notify userB (site manager) to review it. In order for the rule to work, Sat, 22 Sep 2012 10:30:46 GMT https://connect.hyland.com/t5/alfresco-archive/rules-and-user-permissions/m-p/263386#M216516 vassilisx 2012-09-22T10:30:46Z Re: Rules and user permissions https://connect.hyland.com/t5/alfresco-archive/rules-and-user-permissions/m-p/263387#M216517 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><BR /><SPAN>the rule is not the part that needs changing, it's the action / script / permissions that need some tuning. User A technically does not need full Contributor permission on folder B, only the permission to add another child node to it. So, giving user A only the permissions Read + AddChildren on folder B suffices for the rules action / script to move the document from folder A to folder B. Additionally, you need to withdraw ownership status of user A on the document to exclude any permissions granted by that, otherwise user A will always be able to do what he wants with the document.</SPAN><BR /><BR /><SPAN>Normally, I would write such an action in Java in order to make use of the broader API there. E.g. I can move the document with Java without having to give user A any special permissions just for this action.</SPAN><BR /><BR /><SPAN>Regards</SPAN><BR /><SPAN>Axel</SPAN></BODY></HTML> Sat, 22 Sep 2012 12:14:20 GMT https://connect.hyland.com/t5/alfresco-archive/rules-and-user-permissions/m-p/263387#M216517 afaust 2012-09-22T12:14:20Z