topic Re: Custom permission in Alfresco Archive

Custom permission

keijohaapanen — Mon, 18 Dec 2006 11:39:27 GMT

Hi All,I have tried to create custom permissions for a project using alfresco (1.4). Am I missing something or is it impossible to create permission which allows user to see for example that the file is there but not to read actual content?

Re: Custom permission

kevinr — Mon, 18 Dec 2006 16:55:29 GMT

I believe this can be done - the ACL framework is highly granular in the possible set of permissions you can make up more coarse permission sets with, for example:


      <permissionGroup name="Read"  expose="true" allowFullControl="false">
           <includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/>
           <includePermissionGroup type="sys:base" permissionGroup="ReadChildren"/>
           <includePermissionGroup type="sys:base" permissionGroup="ReadContent"/>
      </permissionGroup>
‍‍‍‍‍‍‍

So I assume you can create a new permission similar to 'Read' but which has 'ReadProperties' and does not have 'ReadContent'. So something like:


      <permissionGroup name="CustomRead"  expose="true" allowFullControl="false">
           <includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/>
           <includePermissionGroup type="sys:base" permissionGroup="ReadChildren"/>
      </permissionGroup>
‍‍‍‍‍‍

Hope this helps,

Kevin

Re: Custom permission

keijohaapanen — Tue, 19 Dec 2006 04:55:13 GMT

I thought so also. I also left out that ReadContent includePermission line, but it didn't work. User that had such rights granted to specific space could not see any documents.
It would be extremely useful and important to our project to get such feature implemented. Could somebody test if that really works ok with the 1.4 Alfresco or is the problem only in my setup?

So I assume you can create a new permission similar to 'Read' but which has 'ReadProperties' and does not have 'ReadContent'. So something like:


      <permissionGroup name="CustomRead"  expose="true" allowFullControl="false">
           <includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/>
           <includePermissionGroup type="sys:base" permissionGroup="ReadChildren"/>
      </permissionGroup>
‍‍‍‍‍‍

Hope this helps,

Kevin

Re: Custom permission

andy — Tue, 02 Jan 2007 11:16:40 GMT

Hi

This would be explained if somehing is checking for READ (and not the lower level parts). For example, checking for READ instead of READ_CHILDREN.

Regards

Andy

Re: Custom permission

keijohaapanen — Fri, 05 Jan 2007 06:12:48 GMT

Hello Andy, I didn't quite understand what you are saying.

I try to create CustomRead permission that when granted to some user/space will allow user to see content of that space (and its subspaces) but can not actually read (nor do basicly anything else) files inside these spaces.

Re: Custom permission

llemtt — Thu, 22 Sep 2011 15:47:11 GMT

Hi

any news on this subject?

I'm trying to achieve exactly the same behavior, access to properties but not content, with no success…

Matteo