how can I duplicate a user with all of his access rights ??

[misstina_sm]

How can I duplicate a user with all of his/her access rights and privileges?
i have many document and it is so hard for me to check all document to now that for example mr.X access to view which document with which role,ok??
imagine on of my company secretary give up company she had access to view many content and space ,she had diffrent role on each of that content and space ,now we employment another one for this job then she is new one ok??i must add she to user list and get her all previous secretary access to this new one,i need to have a report to show me all content and space that previous secretary had access,then invite new secretary and set her role like previous one ot some times we employment second secretary i want to apply that all of secretary 1 to secretary 2,i want know that have we this possibility to say that all of access person to gige to person 2 too , i hope can discribe my wish clearly.

thank for replies

[loftux]

I dont know of an easy way to do this, except for looping the entire repository with custom code.

What I recommend all clients I work with is to use groups to set permissions, even if that one group would just have a single member. Lets say you have a CEO group, with the CEO userid1 as member. You assign permissions to the group CEO, not the userid1. You now change the CEO, just add userid2 for the new CEO  to the group CEO. The new CEO immediately have access to all documents that she/he needs.

Another way to do this is use inheritance (this is default in Alfresco), make sure you just set individual permission on the top level, then there are less places to change.

[kevinr]

Loftux is correct. The problem is you want to think about how Alfresco ACLs work differently - it's does not work like this:
"User A has a bunch of permissions on the following objects"
it actually works like this:
"This object has permissions on it - they apply to the following users and groups"

So it's more about setting the permissions on OBJECTS not USERS. And with inheritance and Groups this is actually really easy and elegant. It just requires some thought about how you setup your hierarchy of objects and permissions and groups.

Cheers,

Kev