Advanced Search: Limiting Access to Content Types?

[kylesaid]

I'm not even sure where I would start to limit access for specific content types in each Share site. For example, for ShareSite1 i'd only like to expose ContentType1. But for ShareSite2, i'd like to expose ContentType1 and ContentType2.

I've looks at this wiki, but it looks like this may modify all Share sites across the board.
http://wiki.alfresco.com/wiki/Share_Advanced_Search

It sounds like modifying the ContentType permissions based on user group and/or Share site would be the logical place to do this, but I have no clue where to start. Can somebody please point me in the right direction? Much appreciated.

[kevinr]

That's not an easy task to be honest. Alfresco permissions in general are geared around controlling user/group access to nodes and trees of nodes. So limiting user access to READ for a folder and it's children etc. I don't believe there is support for access per-content-type. I think you could do it using custom Share evaluators in the doclib - but that wouldn't affect the other components…

Anyone else have any suggestions?

Kev

[iblanco]

I'm with kevinr, not and easy task. Maybe you could use some rules on your space that just execute a script changing the permissions of the uploaded file and then set the proper permissions based on the type. Not very nice solution, and not very confortable but probably much easier thant playing around with Alfresco's permission model.

[kylesaid]

Looks like I might be able to achieve this through the "ownable permissions model"

http://wiki.alfresco.com/wiki/Security_and_Authentication#How_to_add_your_own_type_or_aspect.2C_assi...

[kevinr]

That sounds possible - the permission model can be extended and is very powerful, but not for the faint hearted, good luck!

Kev