topic Re: Global Search Returns Data for Unauthorized Sites in Alfresco Archive

Global Search Returns Data for Unauthorized Sites

icecycle — Fri, 26 Feb 2016 22:02:31 GMT

Our IT department has used Alfresco for about a year now. Recently another department requested to use Alfresco to track their documentation. We setup a separate site for this department. The problem we have is the new department is able to see IT documents when they perform a search using the se

Re: Global Search Returns Data for Unauthorized Sites

eswbitto — Mon, 29 Feb 2016 17:56:24 GMT

I have looked into this issue before and I've never been able to find a solution that is workable. I think the reason being is you would have to modify search queries that deal with the database.

Re: Global Search Returns Data for Unauthorized Sites

mrogers — Mon, 29 Feb 2016 22:36:02 GMT

It is not correct that search returns nodes you cannot see. I think a bit more investigation is required.

Re: Global Search Returns Data for Unauthorized Sites

eswbitto — Tue, 01 Mar 2016 18:56:47 GMT

@mrogers,

I'm not sure who you are addressing here.

Re: Global Search Returns Data for Unauthorized Sites

mrogers — Wed, 02 Mar 2016 13:05:28 GMT

Well if the report is true and search is returning private documents that can't be seen then there is probably a bug worthy of being raised in issues.alfresco.com. However before we can consider that there needs to be some more investigation into what exactly is the problem.

Re: Global Search Returns Data for Unauthorized Sites

icecycle — Tue, 08 Mar 2016 21:36:27 GMT

mrogers, what type of details would you need to verify if this is a bug?

Re: Global Search Returns Data for Unauthorized Sites

icecycle — Fri, 11 Mar 2016 14:27:17 GMT

@mrogers,

Here is what happens. User A should only be able to see Site1. User B should only be able to see Site2. If user A searches, it will return data from Site1 and Site2 and if user B searches, it will return data from Site2 and Site1. Both users are able to open the documents from the other sites. I'm looking for a way to prevent the users from crossing sites in their search results and the underlying documents. The documents which are uploaded to each sites are MS word documents and PDFs.

Thanks

Mike B.