topic Re: Configuring separate permissions for adding aspects and editing properties in Alfresco Archive

Configuring separate permissions for adding aspects and editing properties

sunnysharma — Tue, 30 Dec 2014 05:41:07 GMT

Is there a way to apply/configure separate permissions for adding aspect and editing properties on a document? Right now we have a permission '_WriteProperties' which as per the documentation is "The permission to write to the properties of a node. This permission includes adding aspects to a node a

Re: Configuring separate permissions for adding aspects and editing properties

mitpatoliya — Tue, 30 Dec 2014 09:06:32 GMT

You can create a action evaluator which will identify current users group.
Then apply this evaluator to add aspect action. By doing this your add aspect action will be only visible to the usergroup which you want.

Re: Configuring separate permissions for adding aspects and editing properties

sunnysharma — Fri, 02 Jan 2015 03:59:56 GMT

Hi Mits,

Thanks for your reply. First, I don't want to create a new action. I want this for existing action which is 'Manage Aspects'. And secondly, I don't want this for group but this should be based on role or permission. Now we have evaluator for groups but I don't think there is any evaluator for role and permission. If there is any way to create evaluator based on role or permission please let me know, I have tried this but to no avail.

Another thing is we can add permission directly to the action. For manage aspect action we have following code:


         <!– Manage aspects –>
         <action id="document-manage-aspects" type="javascript" label="actions.document.manage-aspects">
            <param name="function">onActionManageAspects</param>
            <permissions>
               <permission allow="true">Write</permission>
            </permissions>
            <evaluator negate="true">evaluator.doclib.action.isLocked</evaluator>
         </action>
‍‍‍‍‍‍‍‍‍‍

Now here if I try to change the permission, it doesn't seem to work, which is really strange. e.g. If I change the permission to 'AddChildren', it implies that person/group with 'Editor' role should not see the action but a person with 'Contributor' role (and admin) can see this action. But strangely no one, even admin, is not able to see this action after this change. Am I missing something here while defining permission for action?

Re: Configuring separate permissions for adding aspects and editing properties

g_rathod — Fri, 30 Jan 2015 06:14:00 GMT

I am on same path, I do have one aspect on folder and after applying aspect I can see new action added to folder. I want to show my aspect in list only if user have specific role. So the user having that specific role can only see my aspect and apply it.
Anyone achieved it ?

Re: Configuring separate permissions for adding aspects and editing properties

mahmoud — Sun, 11 Dec 2016 07:23:56 GMT

Hi ,

i have the same issue , did you find the solution ?