topic Defining new roles in Alfresco Archive

Defining new roles

doblek — Tue, 30 Jan 2007 19:00:03 GMT

Hi all,I'm trying to define some new roles in Alfresco, so I headed to permissionDefinitions.xml in model folder and added a new role (since I think this file can't be extended with a permissionDefinitions-custom.xml placed at extension folder) called "Deleter", just this way:<permissionSet type=

Re: Defining new roles

andy — Mon, 11 Jun 2007 12:22:25 GMT

Hi

$$Deleter$$ means there is no I18n key in the messages file to dsiplay something better

You can not extend the permissions model but you can redefine where it is loaded from (ses public-services-security-context.xml).

Your changes look OK. Is there any UI error?

Exposed means the permission will be shown in the UI.

Your understanding of groups and permissions/roles is correct.
A group is an authority to which you can assign Contributor as a role/group of permissions.

Andy

Re: Defining new roles

doblek — Mon, 11 Jun 2007 14:35:35 GMT

Hi Andy,

and thanks for your response 😃
You gave me some insight in the matter =D

As far as I can remember, (I gave up creating new roles a time ago) I could not assign the new role to any user through the web client… maybe I should have defined the internationalization key for those new roles, and it could have worked…

Thanks anyway 😃

Regards,
Enrique

Re: Defining new roles

seraphon — Wed, 13 Jun 2007 07:01:23 GMT

Hi

I d like to continue where you stopped doblek, and thus create a role with custom permissions so I d like to know one thing:
What does internationalization key stand for? What is it? Where must I create it?

Thanks anyways for the beginning of the process (modifying the permissionDefinitions.xml )

Regards seraphon

edit:
I tried the code doblek give in the beginning and it works to a certain extent.
I do have deleter that appears between $ in the list of roles but I can asign it to people and they indeed can only read or delete in the space where they are deleting.

I do get the following message in the tomcat window:
14:36:37,953 WARN [org.alfresco.web.app.ResourceBundleWrapper] Failed to find I18N message string key: Deleter

Re: Defining new roles

doblek — Wed, 13 Jun 2007 09:33:14 GMT

Hi seraphon,

I think my English is not good enough to explain which is the i18n key… so try to read this.
Anyway, I think I'm going to give myself a try… 😃
In order to make the code transparent to the language you're viewing the webapp, you can define a hashtable for each language where some string is identified by a key. The key is the same in each hashtable, but the value is the appropiate translation to each language.
So you write your code using the key, and then, this key is replaced by the proper value based on the preferred locale (which is pointed by the browser). Based on this locale, the code knows what hashtable it should use. In java, these hashtables can be defined as '.properties' files:

The problem there seems to be that the web client can't find the key for 'Deleter' role (even in the default properties file), so it displays the info the best way it can…
You can see the keys the web client uses for roles in the file 'webclient.properties' (which can be found at '$tomcat_home/webapps/alfresco/WEB-INF/classes/messages/😞


….
# Repo permission display labels
# Note - these come from the server, the english translation is generally the same
Administrator=Administrator
Consumer=Consumer
Read=Consumer
Coordinator=Coordinator
Collaborator=Collaborator
Contributor=Contributor
Editor=Editor
All=All
ContentManager=Content Manager
ContentPublisher=Content Publisher
ContentContributor=Content Contributor
ContentReviewer=Content Reviewer
….
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Try to add a new key

Deleter=Deleter‍

and look if it works…

I didn't check it, but hope that helps…

Regards,
Enrique

Re: Defining new roles

seraphon — Wed, 13 Jun 2007 10:01:58 GMT

doblek, not only it helps, but it works too.
I can now do simple new custom roles.

I ll now try to do something trickier, which is creating a user that can only interact with workflow which means a user who can only approve or disapprove without the right of editing, creating or deleting any documents, and with no need of ownership.
In fact the user can only click on the detail button and the approval ,or denial if there is, button.
I do know it will be very hard if not impossible to do.
First thing first I ll have to understand where the workflow is defined and how is described/implemented the green(red) button of approval (denial) of workflow.

Anyways thank you for your help doblek

regards
seraphon

Re: Defining new roles

itsmanish — Tue, 19 Jun 2007 11:50:38 GMT

Super topic doblek.
Being a new user, this thread is a tutorial in itself. Thanks again.

Re: Defining new roles

doblek — Tue, 19 Jun 2007 14:12:10 GMT

Many thanks to Andy (who provided us the knowledge) and seraphon (who has been succesful coding it)

Re: Defining new roles

rupanjal — Wed, 16 Dec 2009 10:18:51 GMT

Hi guys,
Thanks for the knowledges you all have shared about creating a new role.I have one think to know.Suppose i want to create an EndUser role who can only view,delete and upload document,he cant create a new space,What permission sets should i use?I used createchildren and read but then create space/content option is appearing.What to do?
Also when a file is uploaded,there is a dropdown along with the edit,view and delete icons.The dropdown contains options like cut,copy,start discussion,start advance workflow.How can i disable it?