CMIS Root Path

[dgildeh]

Hi everyone, I just raised this improvement on JIRA here:

http://issues.alfresco.com/jira/browse/ALF-5124

Basically I'd like to know how we can restrict CMIS to query/access only content under a root path (in our case the 'Sites' directory). Right now if you login with CMIS you can see all the folders and as a cloud application we don't want to allow developers to browse through all the Data Dictionary etc.

Does anyone know where in the code the CMIS can be restricted to do this? I'd like to make it a configuration option like the file systems (e.g. webdav) where you can restrict the root of the user's access.

[janv]

I've updated ALF-5124 and also linked to ALF-5042. Hope it helps.

Regards,
Jan

[dgildeh]

Thanks Jan I saw it earlier and will give it a try! If it works we'll be going CMIS soon after!

Thanks

David

[dgildeh]

Just tested this on Alfresco Community 3.4a using the Drupal CMIS module. When I modify the rootPath it starts browsing the repository from under /Company Home/Sites as I hoped.

However, if I run a query like "select * from cmis:document" or "select * from cmis:folder" it shows me everything including content under the Data Dictonary (respecting permissions of cause, but everything under the data dictionary is read only by everyone).

Obviously the rootPath is not limiting the CMIS queries to just the sites directory. Is this a bug or a 'feature'? For this to work for us the queries need to be limited to a specific directory as well so users can only find content there and nowhere else.

Thanks,

David