topic Re: WebScripts authorization & design in Alfresco Archive

WebScripts authorization & design

alrice — Wed, 10 Oct 2007 20:14:02 GMT

I am using the WebScripts feature in 2.1 and I am finding it's very nicely designed and easy to understand. I am implementing some public application forms and survey forms. The responses will get saved into Alfresco into a Drop Zone kind of space. However these are public forms and I would prefer n

Re: WebScripts authorization & design

davidc — Thu, 11 Oct 2007 12:47:33 GMT

Set <authentication>guest</authenticaton> in your public web script *.desc.xml files.

Then, when invoking a web script url, add the guest=true url argument.

All items within the repository that need to be read or updated must have guest permissions assigned.

<authentication>none</authentication> means the web script cannot do anything with the repository that requires user authentication. It's useful when rendering non-repository data backed responses.

Re: WebScripts authorization & design

alrice — Thu, 11 Oct 2007 15:52:10 GMT

David, thank you very much. I see now. The guest=true works. Question- it doesn't seem to work with POSTs, just GETs. However, I am cheating and put it on the ACTION as a url argument like this. Is this cheating? will it work with most browsers do you think?

<form action="${url.service}?guest=true"
   method="post"
   enctype="multipart/form-data" id="form1"
   charset="utf-8">
…

Thanks again
Alex Rice

Re: WebScripts authorization & design

workingpeter — Wed, 09 Jan 2008 01:32:38 GMT

Accessing roothome as guest does not appear to be working under 2.9 Labs version. Requesting a script as guest that uses roothome results in error message "roothome is not defined".

The same script does work under Community version 2.1.0.

Re: WebScripts authorization & design

davidc — Wed, 09 Jan 2008 10:55:13 GMT

Ok, we'll take a look. Thanks.