cancel
Showing results for 
Search instead for 
Did you mean: 

?guest=true removed

thestorm
Champ in-the-making
Champ in-the-making
Hi,

we used ?guest=true so far to generate public download links for non-System users. with 5.0.b this was removed - what is the alternative? The changelog says that webscripts are the way to use, but there is NO webscript that allows guest download.

Did anyone already find a solution?

thanks
1 REPLY 1

afaust
Legendary Innovator
Legendary Innovator
Hello,

technically, there are web scripts that allow guest download. The issue here is that there is no web script (to my knowledge) that allows for the same kind of easy workaround the download servlet had with the ?guest=true URL parameter. The web scripts require either a pre-authenticated session (e.g. authenticated as "guest") or an authentication ticket (e.g. for the user "guest") via URL parameters.
How are your links generated - statically or dynamically? In the latter it should be quite simple to have the generating application obtain a "guest" authentication token and incorporate that into the link URL.
Please be aware that a user can access other web scripts with that token and identity as well - if they know how to build the various URLs of Alfresco.

Or do you want truly anonymous access without requiring actual "guest" access? These are two separate kinds of access after all.
As a final solution you could always set up custom download web scripts with the appropriate <authentication> configuration to require "guest" or "none" for the script, but you may have to manage permissions/<runAs> accordingly to avoid AccessDenied issues.

Regards
Axel