topic Re: Security in Alfresco files in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/security-in-alfresco-files/m-p/292545#M245675 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><BR /><SPAN>this is only a security issue for specific use cases and can be easily dealt with. The Alfresco system supports configuration of how / where Alfresco stores its content and you could always set up storage in a way that a normal (admin) user has access to the Alfresco system but not access to the actual content store using either filesystem-level permissions or different storage mechanisms (i.e. store content in a content addressed storage (CAS) system). See &lt;a href="</SPAN><A href="http://docs.alfresco.com/5.1/concepts/manage-cs-home.html" rel="nofollow noopener noreferrer">http://docs.alfresco.com/5.1/concepts/manage-cs-home.html</A><SPAN>"&gt;Setting up ContentStores&lt;/a&gt; from the (Enterprise) documentation, which also applies to Community except that the actual content store implementations may not be available in Community (but can be implemented and plugged in by any Java developer).</SPAN><BR /><BR /><SPAN>Regards</SPAN><BR /><SPAN>Axel</SPAN></BODY></HTML> Mon, 04 Apr 2016 13:15:10 GMT afaust 2016-04-04T13:15:10Z Security in Alfresco files https://connect.hyland.com/t5/alfresco-archive/security-in-alfresco-files/m-p/292544#M245674 Hi,&nbsp;&nbsp; I am currently using Alfresco Community version 4.2 and have observed one potential security concern. When a file is uploaded in Alfresco, it gets uploaded&nbsp; to the 'contentstore' in date wise folder structure. Thus, when I uploaded a '.png' image today (04-Apr-2016) it got saved in the folder Mon, 04 Apr 2016 09:14:58 GMT https://connect.hyland.com/t5/alfresco-archive/security-in-alfresco-files/m-p/292544#M245674 omkar 2016-04-04T09:14:58Z Re: Security in Alfresco files https://connect.hyland.com/t5/alfresco-archive/security-in-alfresco-files/m-p/292545#M245675 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><BR /><SPAN>this is only a security issue for specific use cases and can be easily dealt with. The Alfresco system supports configuration of how / where Alfresco stores its content and you could always set up storage in a way that a normal (admin) user has access to the Alfresco system but not access to the actual content store using either filesystem-level permissions or different storage mechanisms (i.e. store content in a content addressed storage (CAS) system). See &lt;a href="</SPAN><A href="http://docs.alfresco.com/5.1/concepts/manage-cs-home.html" rel="nofollow noopener noreferrer">http://docs.alfresco.com/5.1/concepts/manage-cs-home.html</A><SPAN>"&gt;Setting up ContentStores&lt;/a&gt; from the (Enterprise) documentation, which also applies to Community except that the actual content store implementations may not be available in Community (but can be implemented and plugged in by any Java developer).</SPAN><BR /><BR /><SPAN>Regards</SPAN><BR /><SPAN>Axel</SPAN></BODY></HTML> Mon, 04 Apr 2016 13:15:10 GMT https://connect.hyland.com/t5/alfresco-archive/security-in-alfresco-files/m-p/292545#M245675 afaust 2016-04-04T13:15:10Z