Extends default security

[banania]

Hello all,

I would like to extends default alfresco security (roles and users based) regarding specific business rules (for instance combination of some fields content and/or some node status) and was figuring out how to do that easily. I suppose I should find/create some interceptor class. I found out and tried to interract with a new "voter", but it seems more related to functions call than with node/field access.

Does anybody has some tips or suggestions ?



Kind Regards
Banania

[jbarmash]

Check out this article - it talks about how Security works in Alfresco. 

http://wiki.alfresco.com/wiki/Permissions_and_Roles_Configuration

You should be able to easily extend the default permission model through modifying this file (study it to understand how it all works):
    tomcat\webapps\alfresco\WEB-INF\classes\alfresco\model\permissionDefinitions.xml


There is also more configuration related to permissioning in:

public-services-security-context.xml