topic Extending the Permission Service to allow permissions based on aspects in Alfresco Archive

Extending the Permission Service to allow permissions based on aspects

vamirr — Fri, 24 Jul 2015 16:14:05 GMT

I would like to be able to assign permissions based on aspects.Use caseur Alfresco deployment uses External Authentication for logging in. Our external authentication method allows users to log in by login/password or using a two factor method involving a Common Access Card.The external authentica

Re: Extending the Permission Service to allow permissions based on aspects

afaust — Mon, 27 Jul 2015 08:16:03 GMT

Hello,

typically, you do not extend the PermissionService and even when - it is not a customization recommended by Alfresco. The extension points of custom permissions and dynamic authorities are - from my experience - more than enough to address between 95-99% of use cases. Your requirements sound like something that could be achieved using these two concepts with a bit of "creative coding". Also - instead of extending the permission service you might want to consider simply facading it to add your custom checks AFTER the standard implementation has run and only when appropriate.

Nevertheless, to answer your question: The PermissionServiceImpl is the class you are looking for. It is a self-contained collection of the service and the low level ACL evaluation ("Does user x have permission y?"). In case you do decide to extend it, maybe the best point would be the high-level hasPermission(NodeRef, PermissionReference) method - at lower levels you loose the context necessary to check you aspects.

Regards
Axel

Re: Extending the Permission Service to allow permissions based on aspects

vamirr — Tue, 28 Jul 2015 13:30:30 GMT

Hi Axel,

Thank you for your comments, you have been extremely helpful. I was able to achieve my requirement by implementing a MethodInterceptor and wiring that into the NodeService.