Custom role to view all the space hierarchy

[nikes]

Hello,

We have a requirement to create a custom role who can view all the spaces and subspaces, even if "Inherit Permission" is disabled and user not invited.

Well, just like Administrators can view all the spaces without invitation. But We need a role less than Administrator, just who can view all the spaces.

Is it possible through configuring permissionDefinition.xml ? or tweaking org.alfresco.repo.security.permissions.impl.PermissionServiceImpl.java ?

Thanks,
Nikesh

[mitpatoliya]

Well,I think it will not be possible through the permissionDefinition.xml  as whatever may be the role you define in there that role you need to explicitly go and assign to the user on particular space via webclient only admin has by default access on all the spaces.

[nikes]

Correct.

May be somehow at Java code level it bypasses permission check for ADMINISTRATORS? not sure.

I am thinking adding a custom role in permissionDefinition.xml and then somewhere at java level hardcoding custom role to bypass permissions check similar to ADMINISTRATOR if possible.

[mitpatoliya]

Please share it across if you find the way to do this.
It will be really a useful feature.

[nikes]

There are many java classes in alfresco's security package.

Any hint how permission evaluation happens when a user navigates in repository?