Creating an half-permissioned Administrator

[pmverma]

Hi everybody,Suppose I have a difficulty of being  Administrator in ALfresco because of having to create hundrads of users.

So, I would like to have a "Partial Admin" or "Power User" in my system, they should also be able to create users,

I mean they can only Use the "Groups" and "Users" fields contained in the Admin Tools, but not all the fields.

anybody have idea over it ?

[jpotts]

Here are your choices:

1. Add the user to ALFRESCO_ADMINISTRATORS and trust them to only change users and groups. This would also give them full access to everything in your Alfresco repository. Sounds like this is not a fit for your situation.

2. Use LDAP to manage all of your users and groups, then use an application that surely already exists to delegate administration of the directory to a subset of users. They would use that application to manage users and groups and would never have to touch Alfresco (nor would they possess any special rights that would allow them to do anything other than manage users and groups.

3. Write a custom application that manages Alfresco's users and groups. The custom application behind the scenes would authenticate as a user that has been placed in the ALFRESCO_ADMINISTRATORS group.

Jeff

[pmverma]

Thank you  for your reply Jeff,

sorry for late response as I am on other project,
as you have posted choices, I like to create custom but no to use LDAP,
Although I say custom, but actually I would like to do as follow.

–I have already created a bootstrap group named "MyPrivateUserGroup".
–and I want add user to this group who have right access to create new users and groups.

-so, I added this group under ALFRESCO_ADMINISTRATORS so that they can create users and groups.
-but now newly added groups to ALFRESCO_ADMINISTTRATORS have full permssion over anything.
-thus, I need this "MyPrivateUserGroup should not inherit all permissions from ALFRESCO_ADMINISTRATORS"(need only creating users and groups)
-I am not sure if I am thinking informal way.

-any idea to share?

[jpotts]

Yes, you've identified the problem: Anyone in the administrators group will have full access. Any of the choices above will likely be much easier to implement than the customizations you would need to make in order to change the out-of-the-box behavior to allow your sub-group to be restricted to only group maintenance.

Jeff

[pmverma]

Thank you jpotts,
Now, I would like to develop custom creation of users and groups (customizing..)
so, could you please point the ways how to develop and which services will be use .

Thanks again jpotts,

Note: Now, my sub-group will not be added to ALFRESCO_ADMINISTRATORS, it will be as normal group as we create in alfresco.

[jpotts]

Start here:
http://wiki.alfresco.com/wiki/Repository_RESTful_API_Reference

If you find that there is not a RESTful API out-of-the-box that you need, create it by adding a custom web script. Learn more about Web Scripts here:
http://wiki.alfresco.com/wiki/Web_Scripts

Jeff

[pmverma]

Thanks , let me try it