5.0.a restrict users from creating sites

[mraugh]

I'm trying out 5.0.a Community at a government location and I can't find anywhere that I can restrict non-admin users from creating new sites.  The documentation for v5.0.a talks about editing files in tomcat\webapps\alfresco\WEB-INF\classes\alfresco\model but I have no such directory and the .dtd file it references for instructions doesn't exist either.  Searching Google I've found references for older Alfresco versions that list ridiculously complex file edits of files that also don't seem to exist in this installation. 

I have to be missing something obvious here – this is a fundamental security practice for any kind of shared application, it can't be that hard.  Can it?

[jpotts]

You don't need to edit anything in the content model to turn off the create sites link. However, because you asked, it looks like a lot of the files that were packaged under WEB-INF/classes prior to 5.0 have been moved to JARs that live in WEB-INF/lib. One possible motivation for that is to make it a little harder for people to change those. Although they make a good reference, they should never be edited, so I'm glad they've been moved.

Back to your original question, unless there is a new feature in 5.0.a that provides this functionality, there is no way to turn off site creation without extending the Share UI with a module. The module could use the group membership evaluator to simply remove the link for users who aren't administrators.

Jeff

[mraugh]

Well, that explains why the files the docs say to edit aren't there.

Seriously, though, is this just a Community thing or does the Enterprise version follow the same model?  Maybe my mind is warped by NIST 800-53, but I can't conceive of an environment where it would be reasonable to allow any user to create new sites at will.  Is there a library of modules somewhere, something like Nagios Exchange for Nagios plug-ins, or do I have to pay a Java developer to study the docs and write this module?

Thanks,

-MR

[jpotts]

Community and Enterprise are virtually the same software with differences being around administrative and scale-out (like clustering). So this functionality is identical between the two versions.

The library of modules is at http://addons.alfresco.com.

Jeff

[parashiftaustra]

Hi All,
Parashift have created a Para Module to this solution. Have a look here: https://www.parashift.com.au/site-restrictions/