topic Permissions Granted When Aspect Is Apllied in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/permissions-granted-when-aspect-is-apllied/m-p/297992#M251122 <HTML><HEAD></HEAD><BODY><SPAN>Hi folks, </SPAN><BR /><BR /><SPAN>I know this and issue that has been addressed several times in the forums: </SPAN><BR /><BR /><A href="http://forums.alfresco.com/forum/developer-discussions/content-modeling/permissions-controlled-based-content-aspects-10022006" rel="nofollow noopener noreferrer">http://forums.alfresco.com/forum/developer-discussions/content-modeling/permissions-controlled-based-content-aspects-10022006</A><BR /><A href="http://forums.alfresco.com/forum/developer-discussions/content-modeling/permission-aspect-05022008-1510" rel="nofollow noopener noreferrer">http://forums.alfresco.com/forum/developer-discussions/content-modeling/permission-aspect-05022008-1510</A><BR /><BR /><SPAN>And there is also some documentations that tackles the matter:</SPAN><BR /><BR /><A href="http://wiki.alfresco.com/wiki/Security_and_Authentication#How_to_add_your_own_type_or_aspect.2C_assign_permissions_for_it.2C_configure_it_and_secure_a_service_that_uses_it_" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Security_and_Authentication#How_to_add_your_own_type_or_aspect.2C_assign_permissions_for_it.2C_configure_it_and_secure_a_service_that_uses_it_</A><SPAN>….</SPAN><BR /><BR /><A href="http://wiki.alfresco.com/wiki/PermissionModelDTD" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/PermissionModelDTD</A><BR /><BR /><SPAN>In few words, I'm trying to grant existing permission group 'CreateChildren' to 'Consumer' if a specific aspect is applied. This is what I have added to my custom 'permissionDefinitios.xml' (I have omitted default XML content):</SPAN><BR /><BR /><SPAN>1. Import my custom namespace.</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />&nbsp;&nbsp;&nbsp; &lt;namespaces&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.alfresco.org/model/system/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/system/1.0</A>" prefix="sys"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.alfresco.org/model/content/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/content/1.0</A>" prefix="cm"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.alfresco.org/model/wcmmodel/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/wcmmodel/1.0</A>" prefix="wcm"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.alfresco.org/model/wcmappmodel/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/wcmappmodel/1.0</A>" prefix="wca"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;namespace uri="<A href="http://www.alfresco.org/model/mynamespace/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/model/mynamespace/1.0</A>" prefix="my"/&gt;<BR />&nbsp;&nbsp;&nbsp; &lt;/namespaces&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>2. Define a permission group for 'my:aspect' aspect. I want this permission group to include the existing 'CreateChildren' permission group.</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />&nbsp;&nbsp;&nbsp; &lt;permissionSet type="my:aspect" expose="selected"&gt;<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;permissionGroup name="CreateComments" requiresType="true" expose="false"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup permissionGroup="CreateChildren" type="sys:base" /&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/permissionGroup&gt;<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp; &lt;/permissionSet&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>3. Grant the previously defined permission group to the 'Consumer' role for type 'my:aspect'.</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– The Consumer permission allows read to everything by default.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;permissionGroup name="Consumer" allowFullControl="false" expose="true" &gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="sys:base" permissionGroup="Read"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;includePermissionGroup type="my:aspect" permissionGroup="CreateComment"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/permissionGroup&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>The result of this setup is that users with 'Consumer' role can create children in any site by default, regardless the aspect is applied on the node or not. Am I doing anything wrong? Is this the result expected for such configuration?</SPAN><BR /><BR /><SPAN>Since I taken the 'ownable' model or example, I'm wondering whether the problem might be the fact that I'm using the existing permission 'CreateChildren' instead of completely defining custom low level permissions and permission groups. I have also noticed that there is a service for the 'ownable' aspect, might I need to implement my service as well? I don't so, since this service looks to have to with policies implementation, which I think I don't as far as I'm concerned.</SPAN><BR /><BR /><SPAN>Thanks.</SPAN></BODY></HTML> Tue, 04 Feb 2014 10:41:52 GMT alejandrogarcia 2014-02-04T10:41:52Z Permissions Granted When Aspect Is Apllied https://connect.hyland.com/t5/alfresco-archive/permissions-granted-when-aspect-is-apllied/m-p/297992#M251122 Hi folks, I know this and issue that has been addressed several times in the forums: http://forums.alfresco.com/forum/developer-discussions/content-modeling/permissions-controlled-based-content-aspects-10022006http://forums.alfresco.com/forum/developer-discussions/content-modeling/permission-aspect- Tue, 04 Feb 2014 10:41:52 GMT https://connect.hyland.com/t5/alfresco-archive/permissions-granted-when-aspect-is-apllied/m-p/297992#M251122 alejandrogarcia 2014-02-04T10:41:52Z Re: Permissions Granted When Aspect Is Apllied https://connect.hyland.com/t5/alfresco-archive/permissions-granted-when-aspect-is-apllied/m-p/297993#M251123 <HTML><HEAD></HEAD><BODY><SPAN>Cross-posted on stack here: </SPAN><A href="http://stackoverflow.com/questions/21550398/permissions-granted-when-aspect-is-apllied" rel="nofollow noopener noreferrer">http://stackoverflow.com/questions/21550398/permissions-granted-when-aspect-is-apllied</A><BR /><BR /><SPAN>Jeff</SPAN></BODY></HTML> Tue, 04 Feb 2014 17:27:10 GMT https://connect.hyland.com/t5/alfresco-archive/permissions-granted-when-aspect-is-apllied/m-p/297993#M251123 jpotts 2014-02-04T17:27:10Z