<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic getSourceAssocs() returns secured nodes in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/getsourceassocs-returns-secured-nodes/m-p/267752#M220882</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I am running on Alfresco Community 3.2r2.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I facing a AccessDeniedException which orignates from a getProperties on a node existing in a secured space. I need to know if this a correct behaviour before writing som ugly catch-exception-code…&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Below is a sketch of the folder structure involved.&lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;&lt;BR /&gt;Company Home -&lt;BR /&gt;&amp;nbsp; - Arkivet (secured area, only users in group "arkiverare" can access this area as coordiantors, all subspaces inherits from this folder. The space itself does not inherit from parents)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; - Aktiviteter &lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; - SpaceA containing target association to SpaceC&lt;BR /&gt;&lt;BR /&gt;&amp;nbsp; - Home (group "producenter" have coordinator privileges to this area with inheritance on all subfolders. . The space itself does not inherit from parents)&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; - Aktiviteter&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; - SpaceB containing target association to SpaceC&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; - Resurser&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; - Personer&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; -SpaceC&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;BR /&gt;&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;SPAN&gt;This is the scenario:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;A user belonging to a group called producenter is logged on and tries to edit metadata on "SpaceB". When this space is saved we are performing some logic that involves looping through this space:s target associations. For every target node we do a getSourceAssocs, and for every Source node returned we will do a property lookup.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;The getSourceAssocs returns a node (SpaceA) located in the Company Home/Arkivet/Aktiviteter space. Why? The logged in user should not have permission to read nodes in this area. The exception occurrs when the nodeService tries to access the properties of the node.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Any input would be greatly appreciated.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;/Erik&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 10 Dec 2010 09:45:23 GMT</pubDate>
    <dc:creator>billerby</dc:creator>
    <dc:date>2010-12-10T09:45:23Z</dc:date>
    <item>
      <title>getSourceAssocs() returns secured nodes</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/getsourceassocs-returns-secured-nodes/m-p/267752#M220882</link>
      <description>Hi,I am running on Alfresco Community 3.2r2.I facing a AccessDeniedException which orignates from a getProperties on a node existing in a secured space. I need to know if this a correct behaviour before writing som ugly catch-exception-code…Below is a sketch of the folder structure involved.Company</description>
      <pubDate>Fri, 10 Dec 2010 09:45:23 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/getsourceassocs-returns-secured-nodes/m-p/267752#M220882</guid>
      <dc:creator>billerby</dc:creator>
      <dc:date>2010-12-10T09:45:23Z</dc:date>
    </item>
    <item>
      <title>Re: getSourceAssocs() returns secured nodes</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/getsourceassocs-returns-secured-nodes/m-p/267753#M220883</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Thanks for the feedback. This looks like something we should add. Can you please raise in JIRA ?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks,&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Jan&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 13 Dec 2010 11:19:03 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/getsourceassocs-returns-secured-nodes/m-p/267753#M220883</guid>
      <dc:creator>janv</dc:creator>
      <dc:date>2010-12-13T11:19:03Z</dc:date>
    </item>
  </channel>
</rss>

