?guest=true removed

thestorm — Wed, 26 Nov 2014 01:11:26 GMT

Hi,we used ?guest=true so far to generate public download links for non-System users. with 5.0.b this was removed - what is the alternative? The changelog says that webscripts are the way to use, but there is NO webscript that allows guest download.Did anyone already find a solution?thanks

Re: ?guest=true removed

afaust — Wed, 26 Nov 2014 07:51:55 GMT

Hello,

technically, there are web scripts that allow guest download. The issue here is that there is no web script (to my knowledge) that allows for the same kind of easy workaround the download servlet had with the ?guest=true URL parameter. The web scripts require either a pre-authenticated session (e.g. authenticated as "guest") or an authentication ticket (e.g. for the user "guest") via URL parameters.
How are your links generated - statically or dynamically? In the latter it should be quite simple to have the generating application obtain a "guest" authentication token and incorporate that into the link URL.
Please be aware that a user can access other web scripts with that token and identity as well - if they know how to build the various URLs of Alfresco.

Or do you want truly anonymous access without requiring actual "guest" access? These are two separate kinds of access after all.
As a final solution you could always set up custom download web scripts with the appropriate <authentication> configuration to require "guest" or "none" for the script, but you may have to manage permissions/<runAs> accordingly to avoid AccessDenied issues.

Regards
Axel

topic ?guest=true removed in Alfresco Archive

?guest=true removed

Re: ?guest=true removed