Default Permissions

[rhoefer]

My intention is to remove 'create' access (Spaces) while retaining the ability to Add content. I edited permissionDefinitions.xml to remove:

<includePermissionGroup permissionGroup="AddChildren" type="sys:base"/>

This restricts access to the Spaces control but removes Add Content as well. I didn't see anything in http://wiki.alfresco.com/wiki/Default_Permissions_Model_Reference#Simple_groups that would identify this control. Can anyone point me in the right direction?

[rhoefer]

I'm not sure if this was the correct way to modify this but here's how I got this to work:

In web-client-config-actions.xml I changed the permission group from "CreateChildren" to "AddContent"
In permissionDefinitions.xml I added groups based on CreateChildren for AddContent, Added a simple permission group for AddContent. Removed "AddChildren" complex group from Contributor and added the new AddContent. Added AddChildren complex group to Collaborator.

Contributor can now only add content to spaces and cannot create spaces.

EDIT: I may have jumped the gun. I'm getting an error now when uploading.

07060127 Access Denied. You do not have the appropriate permissions to perform this operation.

EDIT2:

Looks like I may just need to find the right permissions and add my new AddContent group to public-services-security-context.xml

[rhoefer]

I tried a few combinations for adding to the ACL's in permissionDefinitions.xml and didn't make any real progress. So far I've got it split with defining the new permission group and modifying the web context to get this to work. I feel like I should be able to do this by editing permissionDefinitions.xml but guess I'm over looking it right now.