topic Re: Difference Between Authorities & Person, User, Role, Group in Alfresco Archive

Difference Between Authorities & Person, User, Role, Group

pramodkhare — Wed, 10 Oct 2012 06:16:24 GMT

Hi I want to know the Concept of Alfresco Authority. (Note - I am using Alfresco Foundation APi)When I create User I create Authentication for that user and then I create person node for that userif(!authenticationService.authenticationExists(userName)){ authenticationService.createAut

Re: Difference Between Authorities & Person, User, Role, Group

anujs86 — Wed, 10 Oct 2012 06:43:04 GMT

What is the Concept of ROLE,USER,User group authority in alfresco? How they differ from each other?

USER - A person with some properties
ROLE - Entitlements assigned to User
User Group - A group in which users gets added/removed.

Check wiki for more detailed information.

Re: Difference Between Authorities & Person, User, Role, Group

pramodkhare — Wed, 10 Oct 2012 07:29:38 GMT

Hi Anuj,

‍

Thanks for your reply.

Can you tell me more about -
"User A" exists, he is added to "Group_A", and "ROLE_A"

1) On a Node, if all of them have certain access, which will precede,

2) As allow takes precedence than deny, in case of node_level_permissions, what will be the access precedence.

And one more thing, I am facing a weird issue,
I am creating a user using -


if(!authenticationService.authenticationExists(userName)){
              authenticationService.createAuthentication(userName, userName.toCharArray());
              if(perService.personExists(userName)){
                 HashMap<QName, Serializable> properties = new HashMap<QName, Serializable>();
                   properties.put(ContentModel.PROP_USERNAME, userName);
                   properties.put(ContentModel.PROP_PASSWORD, userName);
                   properties.put(ContentModel.PROP_FIRSTNAME, userName);
                   properties.put(ContentModel.PROP_LASTNAME, userName);
                  
                 perService.createPerson(properties);
              }
           }else{
              System.out.println("Usr already exists");
           }‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

by this code, Person with user details is created, but when I try to check if that person authority exists, then it fails..i.e., Person is created but User Authority is not created, so I am not able to add this user to a group or a role, and not able to authenticate user with AuthenticationService.authenticate to access ServiceRegistry, it says Authority doesn't exist.


if(!authService.authorityExists(authService.getName(AuthorityType.USER, "myUsername"))){
              System.out.println("Usr Authority doesn't exists");
           }else{
              System.out.println("Usr Authority exists");
           }
‍‍‍‍‍‍‍

Re: Difference Between Authorities & Person, User, Role, Group

anujs86 — Wed, 10 Oct 2012 08:42:32 GMT

    if(!authenticationService.authenticationExists(userName)){
                  authenticationService.createAuthentication(userName, userName.toCharArray());
                  if(perService.personExists(userName)){
                     HashMap<QName, Serializable> properties = new HashMap<QName, Serializable>();
                       properties.put(ContentModel.PROP_USERNAME, userName);
                       properties.put(ContentModel.PROP_PASSWORD, userName);
                       properties.put(ContentModel.PROP_FIRSTNAME, userName);
                       properties.put(ContentModel.PROP_LASTNAME, userName);
                     
                     perService.createPerson(properties);
                  }
               }else{
                  System.out.println("Usr already exists");
               }‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Above code will only create the user.
You need to explicitly need to give permissions to it and have to set up some home space too.

You can test your code by adding that user to any of the role and group and then giving permissions to some space from Alfresco administration.

Or you can do it programatically using permission services.