Deny admin access to a specific node

[clincks]

Hi,

I'm currently working to change all the role and security of Alfresco.

–> I redevelop own roles who are different from the "Alfresco" commons roles. (I have "invited" my specifics group after what I set specifics permissions for node, menu and service access).

I should like to know if there is a way to DENY access to a node (and subnodes) on the Alfresco admin user.

–> The goal is that admin has no access to ultra confidentials documents. I created my own administrator (and other role) who has access.

I realize that by cutting permission heritance from a specific node. That work fine for "common" role, but not for admin:
admin has dynamic authority, who react differently.

Is there a easy way to "break" the admin "FullControl" permission to a specific node?

Thanks

Stephane

[andy]

Hi

You can remove the globlal permissions for admin in the permissions model xml file.

Andy

[clincks]

Hi

You can remove the globlal permissions for admin in the permissions model xml file.

Andy

This is true… but means that the admin has not more "admin" global permissions in the other places of repository.

That's not completly the feature I should like to have.

Maybe should I overide the global permission class evaluator and add some "extra" tests into?

Thanks for help.