Custom permission

[keijohaapanen]

Hi All,

I have tried to create custom permissions for a project using alfresco (1.4). Am I missing something or is it impossible to create permission which allows user to see for example that the file is there but not to read actual content?

[kevinr]

I believe this can be done - the ACL framework is highly granular in the possible set of permissions you can make up more coarse permission sets with, for example:

      <permissionGroup name="Read"  expose="true" allowFullControl="false">
           <includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/>
           <includePermissionGroup type="sys:base" permissionGroup="ReadChildren"/>
           <includePermissionGroup type="sys:base" permissionGroup="ReadContent"/>
      </permissionGroup>
‍‍‍‍‍‍‍

So I assume you can create a new permission similar to 'Read' but which has 'ReadProperties' and does not have 'ReadContent'. So something like:

      <permissionGroup name="CustomRead"  expose="true" allowFullControl="false">
           <includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/>
           <includePermissionGroup type="sys:base" permissionGroup="ReadChildren"/>
      </permissionGroup>
‍‍‍‍‍‍

Hope this helps,

Kevin

[keijohaapanen]

I thought so also. I also left out that ReadContent includePermission line, but it didn't work. User that had such rights granted to specific space could not see any documents.
It would be extremely useful and important to our project to get such feature implemented. Could somebody test if that really works ok with the 1.4 Alfresco or is the problem only in my setup?

So I assume you can create a new permission similar to 'Read' but which has 'ReadProperties' and does not have 'ReadContent'. So something like:

      <permissionGroup name="CustomRead"  expose="true" allowFullControl="false">
           <includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/>
           <includePermissionGroup type="sys:base" permissionGroup="ReadChildren"/>
      </permissionGroup>
‍‍‍‍‍‍

Hope this helps,

Kevin

[andy]

Hi

This would be explained if somehing is checking for READ (and not the lower level parts). For example, checking for READ instead of READ_CHILDREN.

Regards

Andy

[keijohaapanen]

Hello Andy, I didn't quite understand what you are saying.

I try to create CustomRead permission that when granted to some user/space will allow user to see content of that space (and its subspaces) but can not actually read (nor do basicly anything else) files inside these spaces.

[llemtt]

Hi

any news on this subject?

I'm trying to achieve exactly the same behavior, access to properties but not content, with no success…

Matteo