topic New permission to prevent deletion of custom aspect in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/new-permission-to-prevent-deletion-of-custom-aspect/m-p/281422#M234552 <HTML><HEAD></HEAD><BODY><SPAN>Hi,</SPAN><BR /><BR /><SPAN>I have the following goal to archieve:</SPAN><BR /><SPAN>Once my custom aspect has been applied to any node, it should never be possible to remove it from this node again - except by users of a defined group.</SPAN><BR /><BR /><SPAN>The way to go is:</SPAN><BR /><SPAN>1) Create a new permissionSet and extend the Alfresco permission model with it</SPAN><BR /><SPAN>2) Create a behavior for the "onRemoveAspect" and check via PersmissionService class, if the user has permission to remove the aspect (I'm using Java)</SPAN><BR /><BR /><SPAN>What I've done so far:</SPAN><BR /><SPAN>I've created a new permissionDefinitions.xml for my module and I've extended the existing Alfresco permission model with it in the service-context.xml (as mentioned here: </SPAN><A href="http://docs.alfresco.com/4.0/concepts/secur-permissions.html" rel="nofollow noopener noreferrer">http://docs.alfresco.com/4.0/concepts/secur-permissions.html</A><SPAN> at the very end):</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />&nbsp;&nbsp; &lt;bean id="my.unique.permissionBootstrap" parent="permissionModelBootstrap"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;property name="model" value="alfresco/module/${artifactId}/models/permissionDefinitions.xml"/&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;/bean&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Then I've created the behavior and bound it to the policy for the "onRemoveAspect". This works, the Java class will be invoked if I remove my aspect from any node.</SPAN><BR /><BR /><SPAN>My problem now is, that I do not know, how to create the content in the permissionDefinition.xml exactly. I've read some documentation but I do not understand how implement it in detail, so that it fits my requirement. This is my current approach:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />&lt;permissions&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;namespaces&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.someco.com/model/myModel/1.0" rel="nofollow noopener noreferrer">http://www.someco.com/model/myModel/1.0</A>" prefix="mxCustomType" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.alfresco.org/model/system/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/system/1.0</A>" prefix="sys"/&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;/namespaces&gt;<BR /><BR />&nbsp;&nbsp;&nbsp; &lt;permissionSet type="mxCustomType:connectionSettingsAspect" expose="selected"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;permissionGroup name="myModelPreventAspectDeletion" requiresType="true" expose="false"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="Read"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="Write"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="AddChildren"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="Execute"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– All except delete–&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/permissionGroup&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;/permissionSet&gt;<BR />&lt;/permissions&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>I've all permission groups included except "Delete". My understanding of this is, that if I now add this new permission group (myModelPreventAspectDeletion) to any user, this user will not be able to delete the aspesct, right!??</SPAN><BR /><SPAN>But the goal is exactly the other way around! And here I'm struggling… Actually, I have to insert the "Delete" in the above code (because only users with this permission are allowed to remove the aspect), but than I need anything else, where the deletion will be denied by default and regardless of any permission. Do I have to override some core code of the default permissionDefinitions.xml? </SPAN><BR /><SPAN>And finally the question: How can I add the new permission group to any user in Alfresco?</SPAN><BR /><BR /><BR /><SPAN>Regards,</SPAN><BR /><SPAN>Itzamna</SPAN><BR /><BR /><BR /></BODY></HTML> Thu, 18 Dec 2014 10:22:02 GMT itzamna 2014-12-18T10:22:02Z New permission to prevent deletion of custom aspect https://connect.hyland.com/t5/alfresco-archive/new-permission-to-prevent-deletion-of-custom-aspect/m-p/281422#M234552 Hi,I have the following goal to archieve<IMG id="smileysurprised" class="emoticon emoticon-smileysurprised" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-surprised.png" alt="Smiley Surprised" title="Smiley Surprised" />nce my custom aspect has been applied to any node, it should never be possible to remove it from this node again - except by users of a defined group.The way to go is:1) Create a new permissionSet and extend the Alfresco permission model with it2) Create a b Thu, 18 Dec 2014 10:22:02 GMT https://connect.hyland.com/t5/alfresco-archive/new-permission-to-prevent-deletion-of-custom-aspect/m-p/281422#M234552 itzamna 2014-12-18T10:22:02Z Re: New permission to prevent deletion of custom aspect https://connect.hyland.com/t5/alfresco-archive/new-permission-to-prevent-deletion-of-custom-aspect/m-p/281423#M234553 <HTML><HEAD></HEAD><BODY><SPAN>*push*</SPAN><BR /><BR /><SPAN>Nobody can help?</SPAN></BODY></HTML> Tue, 30 Dec 2014 09:33:44 GMT https://connect.hyland.com/t5/alfresco-archive/new-permission-to-prevent-deletion-of-custom-aspect/m-p/281423#M234553 itzamna 2014-12-30T09:33:44Z Re: New permission to prevent deletion of custom aspect https://connect.hyland.com/t5/alfresco-archive/new-permission-to-prevent-deletion-of-custom-aspect/m-p/281424#M234554 <HTML><HEAD></HEAD><BODY><SPAN>Still looking for a solution… <span class="lia-unicode-emoji" title=":confused_face:">😕</span></SPAN></BODY></HTML> Wed, 18 Feb 2015 14:46:44 GMT https://connect.hyland.com/t5/alfresco-archive/new-permission-to-prevent-deletion-of-custom-aspect/m-p/281424#M234554 itzamna 2015-02-18T14:46:44Z