topic Restrict 'Manage Aspects' to site managers in Alfresco Forum

Restrict 'Manage Aspects' to site managers

hoomanv — Wed, 07 Feb 2018 17:22:55 GMT

Hello,How can I restrict 'Manage Aspects' to site manager role only?Currently a site collaborator is able to remove Versionable aspect of a document that is not owned by them, and that results in all previous versions to vanish with no trace. This is a security issue in my opinion because a collabor

Re: Restrict 'Manage Aspects' to site managers

krutik_jayswal — Thu, 08 Feb 2018 07:47:43 GMT

You need to override the manage-aspect custom action and add an evaluate for group member ship.When we create site for each site few internal groups are created for each role.So evaluator.doclib.action.groupMembership OOB evaluator will not work as group for SiteManager is created dynamically for example if you have site named as account ,internally group will be created as site_account_SiteContributor.

For solution of this you need to create a custom evaluator.Take a reference of below mentioned file and you can create your own evaluator as per your requirement.

https://svn.alfresco.com/repos/alfresco-open-mirror/web-apps/Share/trunk/share/src/main/java/org/alfresco/web/evaluator/…

Re: Restrict 'Manage Aspects' to site managers

hoomanv — Thu, 08 Feb 2018 08:17:49 GMT

I'm looking for a simple XML modification (not java) to achieve this using alfresco community 201707. Is that possible? I don't know where to look for those config files.

Re: Restrict 'Manage Aspects' to site managers

krutik_jayswal — Thu, 08 Feb 2018 08:22:00 GMT

Its not possible using only xml configuration.

Re: Restrict 'Manage Aspects' to site managers

hoomanv — Fri, 09 Feb 2018 16:48:55 GMT

How about just hiding the link? I'd be happy with that too

Re: Restrict 'Manage Aspects' to site managers

hoomanv — Mon, 12 Feb 2018 21:22:23 GMT

I managed to do it with simple XML modification to share-config-custom.xml.

<config evaluator="string-compare" condition="DocLibActions">
<actions>
<action id="document-manage-aspects">
<evaluator>evaluator.doclib.action.isSiteManager</evaluator>
</action>
</actions>
</config>

Re: Restrict 'Manage Aspects' to site managers

krutik_jayswal — Tue, 13 Feb 2018 05:21:14 GMT

Its great.. I was under impression that its not an OOB evaluator.