<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Disable Share UI pages view for a custom role or group in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/disable-share-ui-pages-view-for-a-custom-role-or-group/m-p/299885#M253015</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hey guys,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I've tried to have a look around in this forum, and couldn't find a hint. I'm not even sure that the &lt;/SPAN&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;permissionDefinitions.xml&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt; path is the correct path anyway.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;So, requirements:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;- A custom role (or group) which if applied to a user allows to view any document by directly linking it (so basically document-details page etc.), but prevents the user from browsing the other Share UI pages (so /page/repository etc.). If using a role, it would be very much similar to a &lt;/SPAN&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;Consumer&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt; role, with "Read" permissions applied for documents. The goal is to have a group of users or role applied to a folder, where all affected users would be able to view the document directly (they're supposed to receive links from other sources), but not be able to view anything else in the repository. By "anything else" we actually mean every single page in Share (tasks, workflow, dashboard, etc). &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I think there is no "smart" way of disabling "page" views for a role, so maybe there is another workaround.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;One of my tries was injecting a new &lt;/SPAN&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;.js&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt; file in say repository.ftl file (and check for the user if is part of the said group, if true, then I'd use an ftl macro to show a "not sufficient permissions" notification), but this approach is not quick, as this means I should do the same thing for every &lt;/SPAN&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;ftl&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt; file in the &lt;/SPAN&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;components&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;SPAN&gt; share folder.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Another way could be using apache etc, but that way we don't have access to Alfresco/Share APIs in order to get user role/group/permissions, so I wouldn't know when the page should be disabled.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Last thing is: this is being tested on Alfresco 4.2.2 (Enterprise) on linux x64.&amp;nbsp; &lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 01 Sep 2015 05:11:27 GMT</pubDate>
    <dc:creator>alch3mi5t</dc:creator>
    <dc:date>2015-09-01T05:11:27Z</dc:date>
    <item>
      <title>Disable Share UI pages view for a custom role or group</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/disable-share-ui-pages-view-for-a-custom-role-or-group/m-p/299885#M253015</link>
      <description>Hey guys,I've tried to have a look around in this forum, and couldn't find a hint. I'm not even sure that the permissionDefinitions.xml‍ path is the correct path anyway.So, requirements:- A custom role (or group) which if applied to a user allows to view any document by directly linking it (so basic</description>
      <pubDate>Tue, 01 Sep 2015 05:11:27 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/disable-share-ui-pages-view-for-a-custom-role-or-group/m-p/299885#M253015</guid>
      <dc:creator>alch3mi5t</dc:creator>
      <dc:date>2015-09-01T05:11:27Z</dc:date>
    </item>
    <item>
      <title>Re: Disable Share UI pages view for a custom role or group</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/disable-share-ui-pages-view-for-a-custom-role-or-group/m-p/299886#M253016</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;How about adding a custom web filter to alfresco or share?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;You can include your logic using Alfresco Java API in order to get user group and requested page. &lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Take a look at &lt;/SPAN&gt;&lt;A href="https://github.com/keensoft/alfresco-agreement-filter/blob/master/agreement-filter-share/src/main/java/es/keensoft/share/filter/AgreementFilter.java" rel="nofollow noopener noreferrer"&gt;https://github.com/keensoft/alfresco-agreement-filter/blob/master/agreement-filter-share/src/main/java/es/keensoft/share/filter/AgreementFilter.java&lt;/A&gt;&lt;SPAN&gt; for reference on creating custom web filters for Alfresco.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 01 Sep 2015 13:45:14 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/disable-share-ui-pages-view-for-a-custom-role-or-group/m-p/299886#M253016</guid>
      <dc:creator>angelborroy</dc:creator>
      <dc:date>2015-09-01T13:45:14Z</dc:date>
    </item>
    <item>
      <title>Re: Disable Share UI pages view for a custom role or group</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/disable-share-ui-pages-view-for-a-custom-role-or-group/m-p/299887#M253017</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;hi Angel,&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;thanks for you response.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I had a look into the source code, and this approach seems interesting.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Although, it seems to me like this method can only be used during authentication, is that right? I'd still like to apply that filter pretty much every time a user opens a page (so `WebFilter` might be a good approach, but not with the `AuthenticationUtil` method).&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Or am I missing something?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;EDIT:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I just realized that class is actually implemented through WebFilter, which is triggered for every "/page" web request). Could be a good solution actually. I'll have it a go.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;I might update this post with the outcome, &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 04 Sep 2015 02:29:00 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/disable-share-ui-pages-view-for-a-custom-role-or-group/m-p/299887#M253017</guid>
      <dc:creator>alch3mi5t</dc:creator>
      <dc:date>2015-09-04T02:29:00Z</dc:date>
    </item>
  </channel>
</rss>

