topic Re: Prevent folder creation for specific role? in Alfresco Archive

Prevent folder creation for specific role?

nenad982 — Mon, 12 May 2014 13:53:01 GMT

Hi all,I would like to disable persons which has specific role (are members of some group) to create folders using Share UI or WebDAV. Do you have suggestion what would be the most elegant and user-friendly way to do this?Thanks

Re: Prevent folder creation for specific role?

kaynezhang — Mon, 12 May 2014 14:27:00 GMT

You can to extend alfresco permission model and define a custom role which only have read permissions;
Follow url

 http://wiki.alfresco.com/wiki/Permissions_and_Roles_Configuration#Default_Permissions ‍

is a description about permission and role
and look to

http://docs.alfresco.com/4.2/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Fconcepts%2Fsecur-permissions.html‍

for how to extend permission

Re: Prevent folder creation for specific role?

nenad982 — Mon, 12 May 2014 18:45:15 GMT

Hi kaynezhang,

thank you for your answer but I don't see how I can forbid creation of FOLDER (not content) for specific role??? There is specific permission group CreateChildren but it there is not CreateFolder or CreateContent. Maybe I didn't understand your suggestion very well so could you please explain me a little bit more what is your idea?

Thanks

Re: Prevent folder creation for specific role?

nenad982 — Mon, 12 May 2014 21:38:00 GMT

Does anyone maybe knows how to deal with this?

Thanks in advanced

Re: Prevent folder creation for specific role?

kaynezhang — Tue, 13 May 2014 00:12:00 GMT

Do you want these users to create content in this folder?

If yes ,you can create a new role that only have permissions such as _ReadProperties、_ReadChildren etc.. but don't have permissions such as _DeleteChildren、_CreateChildren、_DeleteNode。 And assign the new role to your users on that space.
If no, also don't give your new role AddChildren permission.

Re: Prevent folder creation for specific role?

crono40 — Tue, 13 May 2014 09:00:42 GMT

Maybe you can do it with a script applying a rule on your repository folder. This rule will execute a JS script when elements will be created in this folder.

In the script you have to test two things :

Firstly, if the document you'are creating is a folder ( if(document.isContainer()) )
And if your user is part of a group. For this, look the JS Api http://wiki.alfresco.com/wiki/4.0_JavaScript_Services_API and the function getAllUsers() whick give you all users of a group.
If tho previous conditions are gook, you will have to delete the folder : document.remove();

Re: Prevent folder creation for specific role?

kaynezhang — Tue, 13 May 2014 13:07:05 GMT

I'm very sorry it is my mistake ,only forbiding creation of FOLDER not content for specific role is not realizable .Is it your requirement that forbiding creation of FOLDER not content content for specific role?

Re: Prevent folder creation for specific role?

nenad982 — Fri, 16 May 2014 09:23:16 GMT

Hi all,

just to update this post because I found solution. So requirement at the end was to disable Site Collaborators to create folders (just folders, not content). What I did is following:

- I override server site Java script controller for web scripts which will render Document Library toolbar, as also as controllers for Drag and Drop area and I added additional information to model - is current user Site Collaborator. With that information I will hide 'New Folder' button from toolbar as also as 'Create a folder' link from Drag and Drop area. So this is related to Share UI.
- I create bahavior and implemented 'NodeServicePolicies.BeforeCreateNodePolicy' policy for cm:folder type. And when it is triggered, I am checking is folder part of some site and does user has Site Collaborator role on the site. If has I will throw


net.sf.acegisecurity.AccessDeniedException.AccessDeniedException
‍‍‍

exception so this will cover if collaborator tries to create folders using WebDAV client. This also give us server site security checking.

Thanks to all…

Re: Prevent folder creation for specific role?

vanson — Wed, 14 Nov 2018 20:27:20 GMT

Hello,

Am having the same prolem canyou please share with me a detailed solution

Will be grateful