Global Search Returns Data for Unauthorized Sites

[icecycle]

Our IT department has used Alfresco for about a year now.  Recently another department requested to use Alfresco to track their documentation.  We setup a separate site for this department.  The problem we have is the new department is able to see IT documents when they perform a search using the search bar at the top right of the screen (Global search).  We have set both sites to private and each site has correct membership.  Is there a way to restrict search results only to sites that the user is authorized in?  We are using version 5.0b with LDAP authentication setup.

Thanks

Mike B.

[eswbitto]

I have looked into this issue before and I've never been able to find a solution that is workable. I think the reason being is you would have to modify search queries that deal with the database.

[mrogers]

It is not correct that search returns nodes you cannot see.    I think a bit more investigation is required.

[eswbitto]

@mrogers,

I'm not sure who you are addressing here.

[mrogers]

Well if the report is true and search is returning private documents that can't be seen then there is probably a bug worthy of being raised in issues.alfresco.com.   However before we can consider that there needs to be some more investigation into what exactly is the problem.

[icecycle]

mrogers, what type of details would you need to verify if this is a bug?

[icecycle]

@mrogers,

Here is what happens.  User A should only be able to see Site1.  User B should only be able to see Site2.  If user A searches, it will return data from Site1 and Site2 and if user B searches, it will return data from Site2 and Site1.  Both users are able to open the documents from the other sites.  I'm looking for a way to prevent the users from crossing sites in their search results and the underlying documents.  The documents which are uploaded to each sites are MS word documents and PDFs.

Thanks

Mike B.