Creating Half administrator

[noenoe]

I want to create user who can add users and groups like administrator but not full permission as administrator. So i created as new group at bootstrap time.But need to add authority like admin but not full authority like admin which i mean he/she can create users and define groups. How could i solve that problems?

Is it possible that if i place my created new group to under administrator group? How i can make filter authority for my newly created users?

[afaust]

Hello,

a half administrator is something that is not really supported in current Alfresco. In order to manage users and groups (even if it is only adding them) requires the global administrator role - it is not (yet) possible to separate that from other administration privileges that you may not want to grant.

Your only choice would be to write up some proxy services with your own security implementation / configuration and (typically) own UI component, which would allow you a more fine grained control and access, and that accesses the AuthorityService as System user in the backend.

Regards
Axel

[noenoe]

Thank for your advice,

I am beginner of alfresco development so i don't know how the flow of System user's creation. Where is step page of Alfresco Administrator creation?
If i want to create Half admin where place should i research at the beginning

[scouil]

Well actually what Axel suggests (i.e. custom webscript + custom UI trigger) answers exactly the need you depicted.
But I'm afraid it's too much work for someone who begins with Alfresco.

Can you please describe your exact need? We might be able to find a workaround with the default system.
For example, Alfresco have a system of "sites". Each user can create a site and is the "master" of his own site which means he can choose which users can join his site, with which rights.
So he doesn't have a total control over the groups but, depending on your needs, this might be enough and doesn't require any coding from you.

[noenoe]

Could i filter groups from XML file? I mean if i want to filter condition to user i can use "user.isAdmin" condition, similarities, could i filter group from xml files?