topic Re: How to apply permission on search content in Alfresco Forum

How to apply permission on search content

maiconramones — Mon, 24 Apr 2017 18:01:42 GMT

Hellow,I'm searching how to restrict the results of search API basead on some permission.My business requirements isocument A belongs to Entity XDocument B belongs to Entity YDocument C belongs to Entity XSo I need to apply a restriction on search to show only documents of Entity X.How I can imple

Re: How to apply permission on search content

mbajpai — Mon, 24 Apr 2017 19:29:55 GMT

In the api AuthenticationUtil (Alfresco 5.0.3 Public API) , there is a method runAs . Try it .I guess it should work .

Re: How to apply permission on search content

maiconramones — Mon, 24 Apr 2017 19:47:52 GMT

Thanks for the answer Mansha but stil not clear to me.

Because in my case I'm using Rest Api "/search" and running query with cmis language or alfresco full text search... In this case I don't have the UID of alfresco user to try runAs

Re: How to apply permission on search content

afaust — Mon, 24 Apr 2017 20:41:44 GMT

The only way to restrict the visibility of the documents via search is by applying specific read permissions (for different user groups) on these documents and/or their parent folders. You also need to disable permissions inheritance on some ancestor node of your content structure so that the default "everyone can read" permissions is not propagated. "Manage Permissions" is the action you want to look for within Share.

Re: How to apply permission on search content

maiconramones — Mon, 24 Apr 2017 21:16:41 GMT

Thanks Axel.

How does Alfresco work with this permissions on a query? Is it not necessary to apply "where" restrictions in a cmis query? Because I thought it was necessary to append the restrictions on a query to a group or something like that.

One more time Thanks.

Re: How to apply permission on search content

afaust — Mon, 24 Apr 2017 21:20:32 GMT

Permissions are always handled in the background of queries and do not require any special fragments in the query. Only when you use AuthenticationUtils.runAsSystem() can you circumvent the permission checks.