Check group membership of Alfresco user

alf_developer09 — Sat, 08 Aug 2020 11:31:19 GMT

How to check if any alfresco user 'abc' is a member of Alfresco group 'DEF' by using Alfresco java APIs?

Re: Check group membership of Alfresco user

abhinavmishra14 — Sat, 08 Aug 2020 16:24:26 GMT

If i understand correctly, you want to know groups of a user. You can use combination of PersonService and AuthorityService depending on requirements.

To get authorities of a user, considering userName is already known:

https://dev.alfresco.com/resource/docs/java/org/alfresco/service/cmr/security/AuthorityService.html#getAuthoritiesForUser-java.lang.String-

final Set<String> authorities = authorityService.getAuthoritiesForUser("abc"); // abc is a username
final boolean hasDEF = authorities.contains("GROUP_DEF"); //DEF is a group. Make sure to prepend "GROUP_" qualifier for any group

Additionally, You can also use OOTB 'People' (Get Person) rest api.

For example if you want to know the details of a user e.g. 'admin', then:

GET: <host>:<post>/alfresco/service/api/people/admin?groups=true

e.g.

http://127.0.0.1:7080/alfresco/service/api/people/admin?groups=true

This will return info about 'admin' user and all its groups. See the sample response below:

{
url: "/alfresco/service/api/people/admin",
userName: "admin",
enabled: true,
firstName: "Administrator",
lastName: "",
jobtitle: null,
organization: null,
organizationId: "",
location: null,
telephone: null,
mobile: null,
email: "admin@alfresco.com",
companyaddress1: null,
companyaddress2: null,
companyaddress3: null,
companypostcode: null,
companytelephone: null,
companyfax: null,
companyemail: null,
skype: null,
instantmsg: null,
userStatus: null,
userStatusTime: null,
googleusername: null,
quota: -1,
sizeCurrent: 0,
emailFeedDisabled: false,
persondescription: null,
authorizationStatus: null,
isDeleted: false,
isAdminAuthority: true,
capabilities: {
isAdmin: true,
isMutable: true,
isGuest: false
},
groups: [
{
itemName: "GROUP_ALFRESCO_ADMINISTRATORS",
displayName: "ALFRESCO_ADMINISTRATORS"
},
{
itemName: "GROUP_ALFRESCO_MODEL_ADMINISTRATORS",
displayName: "ALFRESCO_MODEL_ADMINISTRATORS"
},
{
itemName: "GROUP_ALFRESCO_SEARCH_ADMINISTRATORS",
displayName: "ALFRESCO_SEARCH_ADMINISTRATORS"
},
{
itemName: "GROUP_EMAIL_CONTRIBUTORS",
displayName: "EMAIL_CONTRIBUTORS"
},
{
itemName: "GROUP_SITE_ADMINISTRATORS",
displayName: "SITE_ADMINISTRATORS"
}
],
immutability: { }
}

Once you get the response, you can parse the json and apply any additonal filtering logic on it as per your use case.

Re: Check group membership of Alfresco user

alf_developer09 — Tue, 01 Sep 2020 14:35:51 GMT

Thanks, it worked !

Re: Check group membership of Alfresco user

EddieMay — Tue, 01 Sep 2020 15:39:03 GMT

Hi @alf_developer09

Thanks for updating & accepting the solution - really helpful to other users.

Thanks again,

Re: Check group membership of Alfresco user

franciscoduarte — Mon, 14 Nov 2022 14:59:29 GMT

Hello,

Is it possible to call the authoritiesService from Share?

I need to do something similar for an evaluator.

Best regards,

Francisco Duarte

topic Check group membership of Alfresco user in Alfresco Forum

Check group membership of Alfresco user

Re: Check group membership of Alfresco user

Re: Check group membership of Alfresco user

Re: Check group membership of Alfresco user

Re: Check group membership of Alfresco user