Restrict the download and copy to privilege

muthukumar — Thu, 28 Nov 2013 13:30:41 GMT

Dear Experts,I am very new to alfresco. I installed 4.2 community version.I created a site and i have 4 different user have different privilege like our alfresco standard.1.Manager.2.collaborator.3.contributor.4.consumer.As per consumer privilege, he/she able to perform the 'download' and 'copy to'

Re: Restrict the download and copy to privilege

yogeshpj — Fri, 29 Nov 2013 08:46:19 GMT

You can use evaluator to manage privileges of actions.

Re: Restrict the download and copy to privilege

muthukumar — Fri, 29 Nov 2013 09:52:33 GMT

Dear Yougesh,

Thank you first,

As I said , I am entiry new even i dont know what is evaluator , can u guide me about evaluator?

Muthu Kumar

Re: Restrict the download and copy to privilege

sujaypillai — Fri, 29 Nov 2013 10:29:41 GMT

Hello Muthu,

Please refer these links :
<li>http://wiki.alfresco.com/wiki/Document_Library_Predefined_Evaluators#Action_Evaluators</li>
<li>http://docs.alfresco.com/4.0/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Fconcepts%2FShare-Doclib-Extend-Intro.html</li>

Create a class which extends BaseEvaluator as shown below -


public class IsSiteConsumerEvaluator extends BaseEvaluator{
    private static Log logger = LogFactory.getLog(IsSiteConsumerEvaluator.class);
    protected static final String SITE = "site";
    
    /**
     * Returns the current site id OR null if we aren't in a site
     *
     * @param context
     * @return The current site id OR null if we aren't in a site
     */
    protected String getSite(RequestContext context)
    {
        // Look for siteId in url path & parameters
        String site = context.getUriTokens().get(SITE);
        if (site == null)
        {
            site = context.getParameter(SITE);
        }
        if (site == null)
        {
            String[] pathNames = context.getUri().substring(context.getContextPath().length()).split("/");
            for (int i = 0; i < pathNames.length; i++) {
                if (pathNames.equals(SITE) && (i + 1 < pathNames.length))
                {
                    site = pathNames;
                    break;
                }
            }
        }
        return site;
    }
    
    @Override
    public boolean evaluate(JSONObject arg0) {
   try{
      final RequestContext rc = ThreadLocalRequestContext.getRequestContext();
      HttpSession session = ServletUtil.getSession();
      CredentialVault cv = rc.getCredentialVault();
      String currentSite = getSite(rc);
      
      if(cv!=null){
         String userName = (String) session.getAttribute(UserFactory.SESSION_ATTRIBUTE_KEY_USER_ID);
         Connector connector = rc.getServiceRegistry().getConnectorService().getConnector("alfresco", userName, session);
         Response res = connector.call("/api/sites/"+currentSite+"/memberships/" +rc.getUserId());
         logger.debug(">> Membership Response :: " + res);
         if(res.getStatus().getCode() == Status.STATUS_OK){
            String response = res.getResponse();
            JSONParser p = new JSONParser();
            Object obj = p.parse(response);
            logger.debug(">> Object obj value :: " + obj);
            if(obj instanceof JSONObject){
               JSONObject jsonRes = (JSONObject) obj;
               String siteMemberShip = (String) jsonRes.get("role");
               logger.debug(">> Object obj value :: " + siteMemberShip);
               if("SiteConsumer".equals(siteMemberShip)){
                  logger.debug(">> In final if returning TRUE");
                  return true;
               }
            }
         }
      }
   }catch(ConnectorServiceException e){
      e.printStackTrace();
   } catch (ParseException e) {
      e.printStackTrace();
   }

   return false;
    }

}
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍


     <bean id="evaluator.doclib.action.IsSiteConsumer" class="com.sop.web.evaluator.IsSiteConsumerEvaluator" />
‍‍‍

Then override the action in share-config-custom.xml as below -


   <config evaluator="string-compare" condition="DocLibActions">
      <actions>
          <action id="document-copy-to" type="javascript" label="actions.document.copy-to">
                    <param name="function">onActionCopyTo</param>
               <evaluator negate="true">evaluator.doclib.action.IsSiteConsumer</evaluator>
                    <evaluator negate="true">evaluator.doclib.action.isLocked</evaluator>
                    <evaluator negate="true">evaluator.doclib.indicator.IsReadOnly</evaluator>
           </action>
          <action id="document-download" type="link" label="actions.document.download">
                    <param name="href">{downloadUrl}</param>
                    <evaluator>evaluator.doclib.action.IsSiteConsumer</evaluator>
         </action>
      </actions>
   </config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Hope so that helps you!!!

Re: Restrict the download and copy to privilege

muthukumar — Fri, 29 Nov 2013 11:19:38 GMT

It is really helpful sujay, it is a great effort but i can't understand the java as i dont know about anything because i am working in oracle domain. I understood that you have given whole script. I have a query regarding the term "Register".

what should I do with this java code (do you mean that I should compile and get the executable format?).

Muthu kumar

Re: Restrict the download and copy to privilege

sujaypillai — Wed, 04 Dec 2013 04:07:05 GMT

I have uploaded the jar here - https://github.com/sujaypillai/alfcustomevaluators/blob/master/custom-site-evaluators-0.1.jar

Just copy it to your tomcat/share/lib and restart your alfresco server.

topic Restrict the download and copy to privilege in Alfresco Archive

Restrict the download and copy to privilege

Re: Restrict the download and copy to privilege

Re: Restrict the download and copy to privilege

Re: Restrict the download and copy to privilege

Re: Restrict the download and copy to privilege

Re: Restrict the download and copy to privilege