topic Re: Private Site activities feed generator in Alfresco Archive

Private Site activities feed generator

vrugginkj — Thu, 13 Jun 2013 10:07:06 GMT

Hello, I'm trying to understand the dashlet Site activities and the more I search, the less I understand ) This is what I found until now : If you add-change-delete a document within the share UI, for each transaction you do, a record is added in the table alf_activity_post with a status POSTED-

Re: Private Site activities feed generator

vrugginkj — Thu, 13 Jun 2013 10:33:35 GMT

Select 2 lines from alf_activity_feed table for the private site :
2174;67;"2013-06-12 15:05:32.995";"{"parentNodeRef":"workspace://SpacesStore/30c4583e-15f5-42f5-925e-4d526a771b19","lastName":"Vruggink","title":"application.ini","page":"document-details?nodeRef=workspace://SpacesStore/292fb813-44ff-4be3-b524-8bffb47ede59","nodeRef":"workspace://SpacesStore/292fb813-44ff-4be3-b524-8bffb47ede59","firstName":"Jaco"}";"''";"org.alfresco.documentlibrary.file-added";"json";"commissions";"documentlibrary";"vrugginkj";"2013-06-12 15:06:03.931"
2175;67;"2013-06-12 15:05:32.995";"{"parentNodeRef":"workspace://SpacesStore/30c4583e-15f5-42f5-925e-4d526a771b19","lastName":"Vruggink","title":"application.ini","page":"document-details?nodeRef=workspace://SpacesStore/292fb813-44ff-4be3-b524-8bffb47ede59","nodeRef":"workspace://SpacesStore/292fb813-44ff-4be3-b524-8bffb47ede59","firstName":"Jaco"}";"adminor";"org.alfresco.documentlibrary.file-added";"json";"commissions";"documentlibrary";"vrugginkj";"2013-06-12 15:06:03.943"

Re: Private Site activities feed generator

vrugginkj — Mon, 17 Jun 2013 05:36:00 GMT

https://issues.alfresco.com/jira/browse/MNT-2220?page=com.atlassian.jira.plugin.system.issuetabpanels:changehistory-tabpanel

This Jira explains everything. Unfortanately all our user accounts contain uppercase letters ((

Re: Private Site activities feed generator

vrugginkj — Mon, 17 Jun 2013 09:17:00 GMT

I changed all the members of my private site, and changed upper-case characters to lower-case. It's working better now.
- file-added activity : OK
- folder-added activity : OK
- file-updated activity : OK

- file-deleted and folder-deleted activity : Only the user that makes the action is in the alf_activity_feed table. Why not the other site-members. ?
Obviously this has nothing to do with private/public site. I tested it for both, and for deletion it's the same thing for both cases…

I think the problem is that once a node is deleted (and has moved in the trash), other site-members don't have permission on it anymore (see the code below, where we check permissions on the node checkNodeRef).

——————————————————————————————————————-
    private boolean canReadImpl(final String connectedUser, final NodeRef nodeRef) throws Exception
    {
        // check for read permission
        long start = System.currentTimeMillis();

        try
        {
            // note: deleted node does not exist (hence no permission, although default permission check would return true which is problematic)
            final NodeRef checkNodeRef;
            if (nodeService.exists(nodeRef))
            {
                checkNodeRef = nodeRef;
            }
            else
            {
                // TODO: require ghosting - this is temp workaround (we should not rely on archive - may be permanently deleted, ie. not archived or already purged)
                NodeRef archiveNodeRef = new NodeRef(StoreRef.STORE_REF_ARCHIVE_SPACESSTORE, nodeRef.getId());
                if (!nodeService.exists(archiveNodeRef))
                {
                    return false;
                }
                checkNodeRef = archiveNodeRef;
            }

            if (connectedUser.equals(""))
            {
                // site feed (public site)
                Set<AccessPermission> perms = permissionService.getAllSetPermissions(checkNodeRef);
                for (AccessPermission perm : perms)
                {
                    if (perm.getAuthority().equals(PermissionService.ALL_AUTHORITIES) &&
                        perm.getAuthorityType().equals(AuthorityType.EVERYONE) &&
                        perm.getPermission().equals(PermissionService.READ_PERMISSIONS) &&
                        perm.getAccessStatus().equals(AccessStatus.ALLOWED))
                    {
                        return true;
                    }
                }
                return false;
            }
            else
            {
                // user feed
                return AuthenticationUtil.runAs(new AuthenticationUtil.RunAsWork<Boolean>()
                {
                    public Boolean doWork() throws Exception
                    {
                        return (permissionService.hasPermission(checkNodeRef, PermissionService.READ) == AccessStatus.ALLOWED);
                    }
                }, connectedUser);
            }
        }
        finally
        {
            if (logger.isDebugEnabled())
            {
                logger.debug("canRead: " + nodeRef + " in " + (System.currentTimeMillis() - start) + " msecs");
            }
        }
    }

Re: Private Site activities feed generator

vrugginkj — Tue, 18 Jun 2013 12:53:35 GMT

I confirm the problem of read-permission on the Trash. Once the content is deleted and the node has moved to the trash, Nobody has read-permission anymore.
Using the JavaScript console I added read-permission for everyone (I know, not quite secure) on the trash-node, and now the records on the activity "file-deleted" are generated in the table alf_actitivy_feed…