Disallowing Create Site for specific users

[bengrah]

Hi all.

I want to give the ability to Create Sites in Alfresco Share to certain users, and disable it for most others. I thought I could do this by going to the Company Home space on Alfresco Explorer and adding a small group of users with Consumer privileges. After this, I logged into Alfresco Share as one of the users with Consumer privileges, and created a site. Obviously this is a user who I don't want to have the ability to create a site.

So I'm asking is there another way to do this? I assumed that Create Site link in Alfresco was the same (or at least something similar) to the Create Space option in Alfresco Explorer (only set up to create a folder in a specific place, AlfrescoExplorer/CompanyHome/Sites), which is why I'm a bit confused as to how I was able to do it. Anyone have any suggestions?

Thanks.

[sebastian1]

I am interrested in a solution for this problem as well!

EDIT:

http://forums.alfresco.com/en/viewtopic.php?f=47&t=21701&p=91532&hilit=create+sites#p91532

[dkenned]

I'm interested in this as well; has a solution been published elsewhere?

[whispering]

Sorry for the late reply. Did not see this thread until I was browsing around.

If I remember correctly, this was how I did it in Alfresco Share

1. Create a group called - SiteCreators - and then populate it with those allowed to create sites.

2. Click Repository.

3. Highlight Sites with the mouse and then on the right - click Manage Permissions

4. In the Locally Set Permissions section - ensure EVERYONE is set to Consumer

5. Click Add User Group - select SiteCreators - and set the group to Contributor

6. Click Save

[ghost23]

I was using the following instructions on 3.4.d :
Controlling who can create sites

By default any authenticated user can create sites in Share. The creator of the new site is given the Site Manager role and they control who has access to the site and in what role.

If an admin user wants to limit who can create sites, they can do this by managing node permissions in the normal way. All sites are created as nodes of type st:site under a fixed "site root object" - the "Sites" folder under "Company Home". An admin user can change the permissions on this "Sites" node in order to restrict who has the ability to create children and hence create new sites.

In Alfresco 3.3 and earlier, the admin user must login to the Alfresco Explorer client in order to manage the permissions of the Sites root object. Starting with Alfresco 3.4, they can access the repository nodes and manage their permissions without leaving Share.

By default, the "everyone" authority has a Contributor role on the Sites node. You can remove "everyone" from this node's permissions and replace it with different users or groups of your choosing.

For example, you could create a new group called SITE_CREATORS and give that group the Contributor role on the "Sites" node. In that way, only users who are members of the SITE_CREATORS groups will be able to create sites.

Of course, admin will always be able to create sites.


But I've upgrade to 4.0.a and now the default authority is Consumer instead of Contributor and Consumer and Consumers apparently are allowed to create sites. I need help. If I remove the Everyone = Consumer then i get "Internal Error".

[marvin]

+1 Bump
I'm evaluating alfresco and must say after days of reading documentation the acl handling is rather confusing.
I'd just like to make share sites for people and groups, and only allow a subset of managers the right to allow managing certain
shares and users. Disabling users the right to create they're own shares is surely step 1, and I would think should be the
default behavior. Give as little as possible rights as a default and then let admins to increase that within they're rights.
Is user management different in the enterprise edition?

Having two different management interfaces url/alfresco and url/share is not exactly helping me getting my head around all of this.
Am I making any sense or am I just tired and confused.

[dennobo]

I'm having the same problem with Alfresco 4.0b. I really need to disable site creation for most of the users.

There are some instructions on disabling the 'Create Site' link, but these are for pre-4 versions too, and I don't want to start trying around.

I also don't fully understand why there are two management-interfaces.
Obviously I can only create sub-spaces in the /alfresco mode but then they are more like folders than spaces and they don't show up in /share, or did I miss something?
This is somehow very important in my opinion, because I don't want to create all the sites in the root-directory but rather have a 'projects folder' inside which new sites are created.

[bengrah]

One method I believe you could use to get around the issue is create a webscript which creates sites instead, and then just remove the Create Site link from the drop down box. It's more a sledgehammer to crack a nut kind of scenario however.

[citizenkane]

This looks like the answer:

http://wiki.alfresco.com/wiki/Site_Service#Controlling_who_can_create_sites

Going to give it a try now.

[kendrickw20]

I think this is one thing that I would want to try and I can't wait to try out the link that @citizenkane provided. Hope this works. Let me know if any of you guys got it working. Thanks a lot!