topic node permissions not respected for search in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/node-permissions-not-respected-for-search/m-p/309654#M262784 <HTML><HEAD></HEAD><BODY><SPAN>I have a webscript that does a search query like so:</SPAN><BR /><BR /><PRE class="language-java line-numbers"><CODE><BR />params.addStore(StoreRef.STORE_REF_WORKSPACE_SPACESSTORE);<BR />params.setQuery("a simple lucene query");<BR />ResultSet result = this.searchService.query(params);<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>The search works great except that it does not respect the persmissions of the respective user. It returns items the user is not allowed to see. The description of the webscript is as follows:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />&lt;webscript&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;shortname&gt;Search the repository&lt;/shortname&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;description&gt;&lt;/description&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;url&gt;/myPackage/search&lt;/url&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;authentication&gt;user&lt;/authentication&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;transaction&gt;none&lt;/transaction&gt;<BR />&lt;/webscript&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>I checked the SOAP API which uses pretty much the same call</SPAN><BR /><PRE class="language-java line-numbers"><CODE><BR />StoreRef storeRef = Utils.convertToStoreRef(store);<BR />searchResults = searchService.query(storeRef, query.getLanguage(), statement);<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>There the permissions are checked. So this should not be a configuration issue.</SPAN><BR /><BR /><SPAN>How can I make the webscript respect the users' persmissions?</SPAN></BODY></HTML> Mon, 27 Oct 2014 09:47:57 GMT tim-erwin 2014-10-27T09:47:57Z node permissions not respected for search https://connect.hyland.com/t5/alfresco-archive/node-permissions-not-respected-for-search/m-p/309654#M262784 I have a webscript that does a search query like so<IMG id="smileytongue" class="emoticon emoticon-smileytongue" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" />arams.addStore(StoreRef.STORE_REF_WORKSPACE_SPACESSTORE);params.setQuery("a simple lucene query");ResultSet result = this.searchService.query(params);‍‍‍‍‍The search works great except that it does not respect the persmissions of the respective us Mon, 27 Oct 2014 09:47:57 GMT https://connect.hyland.com/t5/alfresco-archive/node-permissions-not-respected-for-search/m-p/309654#M262784 tim-erwin 2014-10-27T09:47:57Z Re: node permissions not respected for search https://connect.hyland.com/t5/alfresco-archive/node-permissions-not-respected-for-search/m-p/309655#M262785 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><BR /><SPAN>if you have a Java-backed web script, please keep in mind to always configure it using public service beans (e.g. beans called "SearchService" / "NodeService" with an upper-cased initial letter) in your Spring configuration XML files. Only those service beans will have the security mechanism attached while the private service beans (lower-cased initial letter) are the actual implementation.</SPAN><BR /><BR /><SPAN>Regards</SPAN><BR /><SPAN>Axel</SPAN><BR /><SPAN>Axel</SPAN></BODY></HTML> Mon, 27 Oct 2014 12:00:38 GMT https://connect.hyland.com/t5/alfresco-archive/node-permissions-not-respected-for-search/m-p/309655#M262785 afaust 2014-10-27T12:00:38Z