Limit administrator node access

[rhakaro]

Hi there!

I have a very big problem. I need to deny access to some confidential documents to administrator user.
I have read a lot, and the only thing that maybe solves this problem is to configure "permissionDefinitions.xml" file, but I think this is not the key to resolve my problem.

A partial solution is to extend the next webscripts:

- document-actions.js
- documentlist.js
- document-versions.get.html.ftl
- document-versions.get.js
- document-versions.js

To hide options to admin user (using a property or a custom type, it doesn´t matter).

My problem is the next. My alfresco is accesible by Office (VTI) and Lotus Notes, so changing these webscripts don´t solve this situation.

Do I have to modify the get permission Service?
What can I do?

I´m using 3.4 enterprise edition (up to v4 next year).

Thank´s in advance, best regards!

[mikeh]

You'll find it very difficult, perhaps impossible, to restrict access to documents from the admin user. Further, simply restricting them via UI won't solve the problem as, as you've already discovered, there are other filesystem and API interfaces to consider.

Probably your best option is to use the in-built password protection if the documents are MS Office format, for example.

Thanks,
Mike

[rhakaro]

Hi Mike, thanks for answer!

Do you refer to protect via password the Office document?
Or there are some method (or action) to protect by password documents in Alfresco?? (sorry for my poor experience)

Best regards!

[mikeh]

I mean the option built-in to Office itself.

Thanks,
Mike

[rhakaro]

Ok so. This seems to be the only way to solve my problem.

I have proved that putting password to an Office document, it´s not possible to open it with Office (obvious) or share and explorer. But a very good thing is that the "Previsualization" in share doesn´t works  neither! (that´s fantastic).

Thank you very much again, Mike.