External users and site creation

[daltenho]

We're trying to figure out a way to prevent external users from creating new sites in Alfresco Share. Is there a way to prevent them from doing so (or, as a workaround, at least hiding the button so they cannot see the option).

Thanks!

[zaizi]

Options in increasing level of effort;

1. Hide the button all together for everyone. (Probably not the best).
2. Hide the button for users who's email address doesn't end with your company email. (Or something similar to distinguish internal users from external users).
3. Add custom aspect to external users and filter by that when rendering the Sites dashlet.

The code to modify the button is in my-sites.get.js and my-sites.get.html.ftl files in tomcat/webapps/share/WEB-INF/classes/alfresco/site-webscripts/org/alfresco/components/dashlets/. Also don't forget to make corresponding changes in my-sites.js to ensure any are not referring to any html elements you've removed from within javascript.

Ainga

[daltenho]

1. Hide the button all together for everyone. (Probably not the best).
2. Hide the button for users who's email address doesn't end with your company email. (Or something similar to distinguish internal users from external users).
3. Add custom aspect to external users and filter by that when rendering the Sites dashlet.

I think only the third will work for us since we have more than one email domain…

How does one distinguish external users from others to create an aspect? I noticed that external users tend to get added to a group called "site_exuser" Is this a reliable way? Sorry, I'm really new to Alfresco…

Thanks!

[david_labbe]

Hi there,

having just started with Alfresco explorer and share, I am exploring the various case scenario appropriate for our company. The share concept is very interesting to exchange with clients or vendors, but I find it amazing that external users can just go about creating however many site they so wish without any control whatsoever. I think it should be a security feature to allow or restrict site creation.

I read the above replies to handle this issue (thanks Ainga) but I am a bit of a newb with both Alfresco and Java environment. Would you mind giving a bit more details regarding how to restrict the possibility of site creation? In my case, I would restrict it to users within our company's domain.

Thank you in advance for your help.

Kind regards

David