topic Re: Customisation des droits utilisateurs in Alfresco Archive

Customisation des droits utilisateurs

thomasberment — Tue, 23 Feb 2010 08:33:45 GMT

Salut tout le monde, je reviens vers vous pour une petite question, j'ai bien cherché sur le net est j'ai déjà plus ou moins trouvé des chose intéressante sur le sujet mais j'aimerai avoir votre avis. Je sais que certain sont des experts en Alfresco alors je vous demande …Je voudrai ajouter ou plutô

Re: Customisation des droits utilisateurs

michaelh — Tue, 23 Feb 2010 11:11:10 GMT

Bonjour,

Personnellement je ne vois pas le lien entre votre descriptif et le schéma pour l'illustrer (enfin si, le schéma rend les choses plus compliquées :wink: ).

Cela dit, une bonne base de travail est de commencer par parcourir cette page : http://wiki.alfresco.com/wiki/Permissions_and_Roles_Configuration puis de regarder les fichiers de configuration associés. ("permissionDefinitions.xml" en particulier).

Re: Customisation des droits utilisateurs

thomasberment — Tue, 23 Feb 2010 13:21:45 GMT

Bonjour,

Personnellement je ne vois pas le lien entre votre descriptif et le schéma pour l'illustrer (enfin si, le schéma rend les choses plus compliquées :wink: ).

Cela dit, une bonne base de travail est de commencer par parcourir cette page : http://wiki.alfresco.com/wiki/Permissions_and_Roles_Configuration puis de regarder les fichiers de configuration associés. ("permissionDefinitions.xml" en particulier).

Je suis allé voir sur le wiki, j'ai déjà ajouté un type de droit (son nom est TEST). Il apparait bien dans ma liste des rôles, voir ci-dessous :

[img]http://nsa12.casimages.com/img/2010/02/23/10022302171865356.jpg[/img]

Mais le truc c'est dans mon code j'ai donné des permissions qui sont trop permissives. Pour être clair, je veux pouvoir donner que certaine permission aux utilisateur TEST. Comme lire un document et ne pas lui donner la possibilité de copier ce document. Pour avoir assez cherché, par défaut Alfresco donne cette possibilité aux utilisateur qui ont les droits de plus bas niveau.

Voilà mon code :

permissionDefinitions.xml

<permissionGroup name="TEST" allowFullControl="false" expose="true" >
          <includePermissionGroup type="sys:base" permissionGroup="Read" />
          <includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/>
          <includePermissionGroup type="sys:base" permissionGroup="AddChildren" />
          <includePermissionGroup type="cm:lockable" permissionGroup="CheckOut" />
      </permissionGroup>‍‍‍‍‍‍

Re: Customisation des droits utilisateurs

thomasberment — Tue, 23 Feb 2010 16:24:55 GMT

Je vais me répondre à moi même car j'ai trouvé …

Il faut travailler sur les fichiers suivant :
- web-client-config-actions.xml
- web-client-config-forum-actions.xml
- web-client-config-wcm-actions.xml
- web-client-config-workflow-actions.xml

C'est que sont définies les actions et les droits nécessaires pour les exécuter.

J'ai tout simplement ajouté ceci dans certains cas :

<permissions>
               <permission allow="true">Collaborator</permission>
            </permissions>‍‍‍

Re: Customisation des droits utilisateurs

thomasberment — Thu, 25 Feb 2010 09:41:38 GMT

Salut tout le monde, je viens vous voir aujourd'hui car je suis bloqué sur un problème (peut être un bug, je sais pas) qui dure depuis deux jours.

J'ai modifié les droits pour les customiser fortement et il est apparu un problème, une personne qui a les droits "Write" ne peut pas créer une discussion ni répondre. Seul Admin peut le faire, j'ai pourtant modifié les droits sur ces actions, ils sont sur "Read". Voici un petit screen de mon problème :

[img]http://nsa12.casimages.com/img/2010/02/25/mini_100225103946538801.jpg[/img]

Et le fichier sur lequel j'ai effectué des modifications : web-client-config-forum-actions.xml

<alfresco-config>

   <config>
      <actions>
         
         <!– Forums overrides the checkin document action - as it has more complex evaluation
              logic which takes into account any child forums attached to the node. –>
         <!– Checkin document –>
         <action id="checkin_doc">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <evaluator>org.alfresco.web.action.evaluator.ForumsCheckinDocEvaluator</evaluator>
            <label-id>checkin</label-id>
            <image>/images/icons/CheckIn_icon.gif</image>
            <action-listener>#{CheckinCheckoutDialog.setupContentAction}</action-listener>
            <action>dialog:checkinFile</action>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
         </action>
         
         <!– Override the cut action to check for discussions, don't allow them to be cut –>
         <!– Cut a document or space to the clipboard, from browse or doc details screens –>
         <action id="cut_node">
            <permissions>
               <permission allow="true">Administrator</permission>
            </permissions>
            <label-id>cut</label-id>
            <image>/images/icons/cut.gif</image>
            <action-listener>#{ClipboardBean.cutNode}</action-listener>
            <params>
               <param name="ref">#{actionContext.nodeRef}</param>
               <!–<param name="parent">#{NavigationBean.currentNodeId}</param>–>
            </params>
         </action>
         
         <!– Override the copy action to check for discussions, don't allow them to be copied –>
         <!– Copy a document or space to the clipboard, from browse or doc details screens –>
         <action id="copy_node">
            <evaluator>org.alfresco.web.action.evaluator.DiscussionCopyEvaluator</evaluator>
            <permissions>
               <permission allow="true">Administrator</permission>
            </permissions>
            <label-id>copy</label-id>
            <image>/images/icons/copy.gif</image>
            <action-listener>#{ClipboardBean.copyNode}</action-listener>
            <params>
               <param name="ref">#{actionContext.nodeRef}</param>
               <!–<param name="parent">#{NavigationBean.currentNodeId}</param>–>
            </params>
         </action>
          
         <!– Discuss document or space e.g. jump to Forums view for this node –>
         <action id="discuss_node">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <evaluator>org.alfresco.web.action.evaluator.DiscussNodeEvaluator</evaluator>
            <label-id>discuss</label-id>
            <image>/images/icons/forum-16.gif</image>
            <action-listener>#{ForumsBean.discuss}</action-listener>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
         </action>
         
         <!– Discuss document or space e.g. jump to Forums view for this node –>
         <action id="create_forum_node">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <evaluator>org.alfresco.web.action.evaluator.CreateForumNodeEvaluator</evaluator>
            <label-id>start_discussion</label-id>
            <image>/images/icons/create_forum.gif</image>
            <action>dialog:createDiscussion</action>
            <action-listener>#{DialogManager.setupParameters}</action-listener>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
         </action>
         
        <!– Discuss multilingual content e.g. jump to Forums view for this node –>
        <action id="create_forum_ml_node">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <evaluator>org.alfresco.web.action.evaluator.CreateForumMLNodeEvaluator</evaluator>
            <label-id>start_discussion</label-id>
            <image>/images/icons/create_forum.gif</image>
            <action>dialog:createDiscussion</action>
            <action-listener>#{DialogManager.setupParameters}</action-listener>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
        </action>

         <!– Create a Forums space –>
         <action id="create_forums">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label-id>create_forums</label-id>
            <image>/images/icons/create_forums.gif</image>
            <action>dialog:createForums</action>
         </action>
         
         <!– Create a Forum –>
         <action id="create_forum">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label-id>create_forum</label-id>
            <image>/images/icons/create_forum.gif</image>
            <action>dialog:createForum</action>
         </action>
         
         <!– Delete a Forums space –>
         <action id="delete_forums">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label-id>delete_forums</label-id>
            <image>/images/icons/delete_forums.gif</image>
            <action>dialog:deleteSpace</action>
            <action-listener>#{BrowseBean.setupDeleteAction}</action-listener>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
         </action>
         
         <!– Delete a Forum space –>
         <action id="delete_forum">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label-id>delete_forum</label-id>
            <image>/images/icons/delete_forum.gif</image>
            <action>dialog:deleteSpace</action>
            <action-listener>#{BrowseBean.setupDeleteAction}</action-listener>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
         </action>
         
         <!– Create a Topic –>
         <action id="create_topic">
           <!–  <permissions>
               <permission allow="true">Read</permission>
            </permissions>  –>
            <label-id>create_topic</label-id>
            <image>/images/icons/create_topic.gif</image>
            <action>dialog:createTopic</action>
         </action>
         
         <!– Delete a Topic –>
         <action id="delete_topic">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label-id>delete_topic</label-id>
            <image>/images/icons/delete_topic.gif</image>
            <action>dialog:deleteSpace</action>
            <action-listener>#{BrowseBean.setupDeleteAction}</action-listener>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
         </action>
         
         <!– Create a Topic –>
         <action id="create_post">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label-id>post_to_topic</label-id>
            <image>/images/icons/create_post.gif</image>
            <action>dialog:createPost</action>
         </action>
         
         <!– Post a reply to a Topic –>
         <action id="post_reply">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label-id>post_reply</label-id>
            <image>/images/icons/post_reply.gif</image>
            <action>dialog:createReply</action>
            <action-listener>#{BrowseBean.setupContentAction}</action-listener>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
         </action>
         
         <!– Edit an existing Post –>
         <action id="edit_post">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label-id>edit_post</label-id>
            <image>/images/icons/edit_post.gif</image>
            <action>dialog:editPost</action>
            <action-listener>#{BrowseBean.setupContentAction}</action-listener>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
         </action>
         
         <!– Delete a Post –>
         <action id="delete_post">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label-id>delete_post</label-id>
            <image>/images/icons/delete.gif</image>
            <action>dialog:deleteFile</action>
            <action-listener>#{BrowseBean.setupContentAction}</action-listener>
            <params>
               <param name="id">#{actionContext.id}</param>
            </params>
         </action>
         
         
         <!– the 'action-group' elements define unique blocks of actions that reference the actions
              as defined above and can override or supply display elements for the group of actions –>
         <!– the component is responsible for making the context Node object available with name
              of 'actionContext' so the actions can access it directly to get properties –>
         
         <!– Override browse actions and doc/space details screen actions for the Forums module –>
         <!– Actions for a document in the Browse screen –>
         <action-group id="document_browse">
            <show-link>false</show-link>
            <action idref="discuss_node" />            
         </action-group>
         
         <!– Actions Menu for a document in the Browse screen –>
         <action-group id="document_browse_menu">
            <action idref="create_forum_node" />
         </action-group>
         
         <!– Actions for a space in the Browse screen –>
         <action-group id="space_browse">
            <show-link>false</show-link>
            <action idref="discuss_node" />
         </action-group>
         
         <!– Actions Menu for a space in the Browse screen –>
         <action-group id="space_browse_menu">
            <action idref="create_forum_node" />
         </action-group>
         
         <!– Actions Menu for Document Details screen –>
         <action-group id="doc_details_actions">
            <action idref="discuss_node" />
            <action idref="create_forum_node" />
         </action-group>
         
         <!– Actions Menu for Multilingual Document Details screen –>
         <action-group id="multilingual_details_actions">
            <action idref="create_forum_ml_node" />
            <action idref="discuss_node" />
         </action-group>

         <!– Actions Menu for Space Details screen –>
         <action-group id="space_details_actions">
            <action idref="discuss_node" />
            <action idref="create_forum_node" />
         </action-group>
         
         <!– Actions Menu for Forums Details page –>
         <action-group id="forums_details_actions">
            <action idref="cut_node" />
            <action idref="copy_node" />
            <action idref="delete_space" />
            <action idref="export_space" />
            <action idref="manage_space_users" />
            <action idref="create_shortcut" />
         </action-group>
         
         <!– Actions Menu for Forum Details page –>
         <action-group id="forum_details_actions">
            <action idref="cut_node" />
            <action idref="copy_node" />
            <action idref="delete_space" />
            <action idref="manage_space_users" />
            <action idref="create_shortcut" />
         </action-group>
         
         <!– Actions Menu for Topic Details page –>
         <action-group id="topic_details_actions">
            <action idref="cut_node" />
            <action idref="copy_node" />
            <action idref="delete_space" />
            <action idref="manage_space_users" />
            <action idref="create_shortcut" />
         </action-group>
         
         <!– Create Actions Menu for Forums view –>
         <action-group id="forums_create_menu">
            <action idref="create_forums" />
            <action idref="create_forum" />
         </action-group>
         
         <!– More Actions Menu for Forums view –>
         <action-group id="forums_actions_menu">
            <action idref="details_space" />
            <action idref="delete_forums" />
            <action idref="cut_node" />
            <action idref="copy_node" />
            <action idref="paste_all" />
            <action idref="manage_space_users" />
            <action idref="export_space" />
         </action-group>
         
         <!– Actions for a Forums Space or Forum in Forums view –>
         <action-group id="forums_actions">
            <show-link>false</show-link>
            <style-class>inlineAction</style-class>
            
            <action idref="cut_node" />
            <action idref="copy_node" />
            <action idref="delete_space" />
            <action idref="details_space" />
         </action-group>
         
         <!– Create Actions Menu for Forum view –>
         <action-group id="forum_create_menu">
            <action idref="create_topic" />
         </action-group>
         
         <!– More Actions Menu for Forum view –>
         <action-group id="forum_actions_menu">
            <action idref="details_space" />
            <action idref="delete_forum" />
            <action idref="cut_node" />
            <action idref="copy_node" />
            <action idref="paste_all" />
            <action idref="manage_space_users" />
         </action-group>
         
         <!– Actions for topics in Forum view –>
         <action-group id="forum_actions">
            <show-link>false</show-link>
            <style-class>inlineAction</style-class>
            
            <action idref="cut_node" />
            <action idref="copy_node" />
            <action idref="delete_topic" />
            <action idref="details_space" />
         </action-group>
         
         <!– Create Actions Menu for Topic view –>
         <action-group id="topic_create_menu">
            <action idref="create_post" />
         </action-group>
         
         <!– More Actions Menu for Topic view –>
         <action-group id="topic_actions_menu">
            <action idref="details_space" />
            <action idref="delete_topic" />
            <action idref="cut_node" />
            <action idref="copy_node" />
            <action idref="manage_space_users" />
         </action-group>
         
         <!– Actions for topics in Topic view –>
         <action-group id="topic_actions">
            <show-link>false</show-link>
            <style-class>inlineAction</style-class>
            
            <action idref="post_reply" />
            <action idref="edit_post" />
            <action idref="delete_post" />
         </action-group>
         
      </actions>
   </config>

</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍