topic User rights after export from LDAP in Alfresco Archive

User rights after export from LDAP

grome — Thu, 04 May 2006 08:54:24 GMT

Hi (again ),After the LDAP export i try to connect with a user (who has been export from LDAP) to alfresco and i succeed. But i can't do anything with this user, there is nothing in the "create" menu, what i have to do resolve this ?Regards,Jerome.

Re: User rights after export from LDAP

andy — Thu, 04 May 2006 11:01:54 GMT

Hi

The users do not have permission to create anything.

You need to add permissions for the users' home space(s).

Regards

Andy

Re: User rights after export from LDAP

grome — Thu, 04 May 2006 13:40:35 GMT

Hi Andy,

If what you say is true, why when i create a new user in alfresco he has basic permissions ?
I juste want that when the users who are in my LDAP are exported to alfresco, they have the sames permissions as when i create a user in alfresco.

How can i do that ?

Regards,
Jerome.

Re: User rights after export from LDAP

andy — Thu, 04 May 2006 15:20:44 GMT

Hi

At the moment we are not creating a new home space for every user pulled in from LDAP.

This is on the list but was given low priority.

You could set permissions on a common folder for new users (and set this in the LDAP import stuff). Set permissions on this for a well known group. Add users to this group in ldap. All the users pulled out of LDAP would be in this group and have the group permission.

Hope this helps

Andy

Re: User rights after export from LDAP

grome — Thu, 04 May 2006 15:29:52 GMT

Thanks a lot Andy,
I will try this

Could you reply to theses posts please :

http://forums.alfresco.com/viewtopic.php?t=1765
http://forums.alfresco.com/viewtopic.php?t=1759

Regards,
Jerome.

Re: User rights after export from LDAP

grome — Thu, 04 May 2006 15:47:28 GMT

Hum, i don't understand something :
in the bean ldapPeopleExportSource i have this :


<property name="defaultHomeFolder">
                <value>/app:company_home</value>
        </property>
‍‍‍‍‍

So, the users should have acces to company_home, shouldn't they ?

Regards,
Jerome.

Re: User rights after export from LDAP

andy — Thu, 04 May 2006 16:24:25 GMT

Hi

The import does not set permissions on company_home for each user.

If you add all users to "GroupA" you could then assign a permission for "GroupA" on company_home. A presume you want some users to have read access , some contributor etc …..you can partition the users by group.

Cheers

Andy