topic Re: Document actions based on user rights/role in Alfresco Forum

Document actions based on user rights/role

zputnoky — Thu, 03 Aug 2017 13:26:50 GMT

Is there a way to limit the available document actions (shown in document-browse or document-details view) based on user role or access rights?Regards,Zsolt Putnoky

Re: Document actions based on user rights/role

afaust — Thu, 03 Aug 2017 22:45:32 GMT

Yes, and it is already being done by default. If you read Jeff Potts' tutorial on custom actions, you'll read about the basic configuration to restrict actions based on permissions.

Re: Document actions based on user rights/role

zputnoky — Fri, 04 Aug 2017 06:54:06 GMT

Hi Axel,

I know it is done by default, tested it yesterday. Here is what I need to be able to do. A folder manager or contributor should be able to change properties and run some custom actions we developed, the users with read only or collaborator rights should be able to read the documents and do nothing else.

I will check the link later today, hope I will be able to use it.

Regards,

Zsolt Putnoky

Re: Document actions based on user rights/role

zputnoky — Fri, 04 Aug 2017 15:12:55 GMT

Hi Axel,

Read the doc you proposed and got few questions. I would like to remove almost all the OOTB document actions regardless the user assinged role in the site or in the folder. To do this, do I need to modify the share-config-custom.xml by creating an entry for each action to be removed for each role type? It is a copy/paste operation once the initial set is done, but I am wondering whether a more simple solution exist?

Regards,

Zsolt Putnoky

Re: Document actions based on user rights/role

angelborroy — Fri, 04 Aug 2017 17:44:06 GMT

https://github.com/keensoft/alfresco-simplify-share

Re: Document actions based on user rights/role

zputnoky — Mon, 07 Aug 2017 06:44:48 GMT

Hi Angel,

Thanks alot, will check it out today!

Regards,

Zsolt Putnoky

Re: Document actions based on user rights/role

zputnoky — Mon, 07 Aug 2017 08:53:13 GMT

Hi Angel,

A question, am I able to select which action is visible and which is not?

Re: Document actions based on user rights/role

angelborroy — Mon, 07 Aug 2017 08:55:46 GMT

You can modify/tune the project and compile it again:

ACTIONS - alfresco-simplify-share/removed-actions.xml at master · keensoft/alfresco-simplify-share · GitHub

DOCUMENT ELEMENTS - alfresco-simplify-share/removed-elements.xml at master · keensoft/alfresco-simplify-share · GitHub

LIBRARY ELEMENTS - alfresco-simplify-share/simplify-share/src/main/amp/config/alfresco/web-extension/site-webscripts/es/keensoft/components…

Re: Document actions based on user rights/role

zputnoky — Mon, 07 Aug 2017 09:29:11 GMT

now I just need to learn how to modify/tune/compile your code

Re: Document actions based on user rights/role

zputnoky — Tue, 08 Aug 2017 14:52:06 GMT

Hi Angel,

Had a look on the code and I am not sure this would do what I am looking for. Here is the issue we would like to fix in our proof-of-concept implementation: using the default OOTB document actions, we would like to create a custom, corporate wide document action group for each user role. Then check the role assigned to the logged in user for a given site and show only those actions which are in the corresponding group.

I tried to create a chained evaluator, which removed the action, but for all users, searched the forum but found nothing.

Do you have any ideas how to solve this problem?

Regards,

Zsolt Putnoky

Re: Document actions based on user rights/role

angelborroy — Tue, 08 Aug 2017 15:38:09 GMT

This is exactly what the addon I gave you does: create a special subset of actions for the group "SIMPLE USER": https://github.com/keensoft/alfresco-simplify-share/blob/master/simplify-share/src/main/amp/config/alfresco/web-extension/site-data/extensions/removed-actions.xml#L9

Probably you can develop your own addon taking this one as starting point.

Re: Document actions based on user rights/role

zputnoky — Wed, 09 Aug 2017 11:53:46 GMT

Not sure that your solution does what I need to achieve. In our case we would like to keep the predefined site roles, but modify the available actions based on role.

Am I able to do the following with your code?

Have 3 users
The 3 users are assigned to the same site with different roles: User 1 is manager, User 2 is contributor and User 3 is consumer
I would like to have the following action groups:
- User 1 (manager) : download file, view in browser, edit properties, move to, copy to, start workflow, execute some custom actions
- User 2 (contributor): dowload file, view in browser, edit properties
- User 3 (consumer): download file, view in browser

All other actions like: change type, manage aspects, take ownership, should be reserved for users with admin right.

The users might have different roles in different sites.

I am not a developer and just recently started modifying Alfresco, some of the ideas given are new to me, hence the frequent questions.

Regards,

Zsolt Putnoky

Re: Document actions based on user rights/role

angelborroy — Wed, 09 Aug 2017 12:44:23 GMT

Yes, you can do it by evolving the addon I gave you.

Re: Document actions based on user rights/role

zputnoky — Wed, 09 Aug 2017 12:49:09 GMT

okay, time to have another look and figure out how to make that work.

thanks for your patience, much appreciated.

Zsolt Putnoky

Re: Document actions based on user rights/role

angelborroy — Wed, 09 Aug 2017 12:51:22 GMT

Probably the hardest is to deal with all those "Site_SiteShortName_RoleName" dynamically generated groups...

Re: Document actions based on user rights/role

zputnoky — Wed, 09 Aug 2017 12:56:35 GMT

Do I need to list all the actions I would like to make available into the removed-actions.xml file?

Into these part?

Re: Document actions based on user rights/role

angelborroy — Wed, 09 Aug 2017 13:15:25 GMT

You need one "removed-actions.xml" per group / role

Re: Document actions based on user rights/role

zputnoky — Thu, 10 Aug 2017 15:14:13 GMT

I assume if I need to create 3 diffrent 'removed-action.xml' I should name them differently. Where do I need to declare the files?

Another issue: user roles might change between sites. In our case, a site is a project. We have few projects in the same time, so user A who is a manager of a site/folder in project A might be a simple Consumer in project B. In such case, do I need to create a group for each project?

Re: Document actions based on user rights/role

angelborroy — Fri, 11 Aug 2017 07:30:50 GMT

‌ I remember you told me about some kind of Site Evaluator to filter Surf components for site roles, right? I can't find it now...

Re: Document actions based on user rights/role

angelborroy — Fri, 11 Aug 2017 07:34:06 GMT

If there is no role evaluator by default, you should create a custom evaluator by developing something similar to http://soft29.info/blog/entry/alfresco-extension-module-evaluators