No there should not be a problem getting a folder that a user has consumer access to. But you will have to filter out parent-related properties if the user doesn't have access to any of the folders in the hierarchy.For example, I've created a structure with the following:test (Test User has no access)|—– subFolder (Test User has Collaborator access) |——subSubFolder (Test User has Consumer access)
I can successfully get a handle to subSubFolder only if I use a filter:>>> folder = repo.getObjectByPath('/test/subFolder/subSubFolder', filter='cmis:objectId,cmis:objectTypeId,cmis:name')>>> folder.properties{u'cmis:objectId': 'workspace://SpacesStore/3ac7873d-0400-48ad-84d3-887c7b040377', u'cmis:name': u'subSubFolder', u'cmisra:object': None, u'cmis:objectTypeId': 'cmis:folder', u'cmis:baseTypeId': 'cmis:folder'}>>> folder.getAllowableActions(){u'canDeleteContentStream': False, u'canSetContentStream': False, u'canCreateRelationship': False, u'canDeleteTree': False, u'canGetDescendants': True, u'canCheckIn': False, u'canApplyACL': False, u'canGetFolderParent': True, u'canDeleteObject': False, u'canGetAllVersions': False, u'canGetObjectParents': True, u'canGetProperties': True, u'canCreateDocument': False, u'canGetRenditions': False, u'canApplyPolicy': False, u'canUpdateProperties': False, u'canGetAppliedPolicies': True, u'canGetContentStream': False, u'canMoveObject': False, u'canAddObjectToFolder': False, u'canRemoveObjectFromFolder': False, u'canRemovePolicy': False, u'canGetObjectRelationships': True, u'canGetChildren': True, u'canCancelCheckOut': False, u'canGetFolderTree': True, u'canCheckOut': False, u'canCreateFolder': False, u'canGetACL': False}
If I try to get subSubFolder without the filter, even though my test user has access to the immediate parent, the call will fail:>>> folder = repo.getObjectByPath('/test/subFolder/subSubFolder')Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/opt/src/chemistry/cmislib/src/cmislib/model.py", line 969, in getObjectByPath result = self._cmisClient.get(byObjectPathUrl.encode('utf-8'), **addOptions) File "/opt/src/chemistry/cmislib/src/cmislib/model.py", line 209, in get self._processCommonErrors(result) File "/opt/src/chemistry/cmislib/src/cmislib/model.py", line 315, in _processCommonErrors raise PermissionDeniedException(error.status, error.url)cmislib.exceptions.PermissionDeniedException: Error 403 at http://localhost:8080/alfresco/cmisatom/558e5b3c-71a0-42ac-b420-eda16e93e95b/path?path=/test/subFold...
Hope this helps,Jeff
