No there should not be a problem getting a folder that a user has consumer access to. But you will have to filter out parent-related properties if the user doesn't have access to any of the folders in the hierarchy.For example, I've created a structure with the following:test (Test User has no access)
|—– subFolder (Test User has Collaborator access)
|——subSubFolder (Test User has Consumer access)
I can successfully get a handle to subSubFolder only if I use a filter:>>> folder = repo.getObjectByPath('/test/subFolder/subSubFolder', filter='cmis:objectId,cmis:objectTypeId,cmis:name')
>>> folder.properties
{u'cmis:objectId': 'workspace://SpacesStore/3ac7873d-0400-48ad-84d3-887c7b040377', u'cmis:name': u'subSubFolder', u'cmisra:object': None, u'cmis:objectTypeId': 'cmis:folder', u'cmis:baseTypeId': 'cmis:folder'}
>>> folder.getAllowableActions()
{u'canDeleteContentStream': False, u'canSetContentStream': False, u'canCreateRelationship': False, u'canDeleteTree': False, u'canGetDescendants': True, u'canCheckIn': False, u'canApplyACL': False, u'canGetFolderParent': True, u'canDeleteObject': False, u'canGetAllVersions': False, u'canGetObjectParents': True, u'canGetProperties': True, u'canCreateDocument': False, u'canGetRenditions': False, u'canApplyPolicy': False, u'canUpdateProperties': False, u'canGetAppliedPolicies': True, u'canGetContentStream': False, u'canMoveObject': False, u'canAddObjectToFolder': False, u'canRemoveObjectFromFolder': False, u'canRemovePolicy': False, u'canGetObjectRelationships': True, u'canGetChildren': True, u'canCancelCheckOut': False, u'canGetFolderTree': True, u'canCheckOut': False, u'canCreateFolder': False, u'canGetACL': False}
If I try to get subSubFolder without the filter, even though my test user has access to the immediate parent, the call will fail:>>> folder = repo.getObjectByPath('/test/subFolder/subSubFolder')
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "/opt/src/chemistry/cmislib/src/cmislib/model.py", line 969, in getObjectByPath
result = self._cmisClient.get(byObjectPathUrl.encode('utf-8'), **addOptions)
File "/opt/src/chemistry/cmislib/src/cmislib/model.py", line 209, in get
self._processCommonErrors(result)
File "/opt/src/chemistry/cmislib/src/cmislib/model.py", line 315, in _processCommonErrors
raise PermissionDeniedException(error.status, error.url)
cmislib.exceptions.PermissionDeniedException: Error 403 at http://localhost:8080/alfresco/cmisatom/558e5b3c-71a0-42ac-b420-eda16e93e95b/path?path=/test/subFold...
Hope this helps,Jeff
