Missing Link after SSO as admin - Create User

[mikewaters]

I have implemented an SSO filter according to the wiki http://wiki.alfresco.com/wiki/Central_Authentication_Service_Configuration
and everything is working fine for regular users.

When I log in as the admin user I get logged in OK, and I can see the Administration Console, and navigate to Manage System Users, but the Create User link is missing.

Most of the conditional rendering is done by evaluating NavigationBean.currentUser.admin in the JSPs but I can't see what is different about the Create User link.The link appears to be defined in web-client-config-dialogs.xml here:

         
<dialog name="manageUsers" page="/jsp/users/users.jsp" managed-bean="UsersDialog"
                 icon="/images/icons/users_large.gif" title-id="manage_users" 
                 description-id="manageusers_description"
                 actions-config-id="create_user_menu" show-ok-button="false"/>
‍‍‍‍‍‍

The create_user_menu is defined in web-client-config-actions.xml but I can't find any logic related to rendering the link. I need to find out how the conditional rendering works to debug the SSO filter which I suspect is not populating the session with all the required data.

So if anyone knows how the conditional rendering of actions works, or can point me at the right place to look, it would be good!

thanks

-Mike.

[andy]

Hi

Alfresco only managaes its internal users. If you want it create users in your SSO environment i tcna be done but you have to code this.
There is always some other way to create users - you go to AD direct etc etc.
If authentication is external then the managemet of authentication ids, credentials is also external.

Andy

[mikewaters]

Hi Andy
Thanks for the response. I am happy with the creation of users, but the issue is conditional rendering of links in the admin console. If a user is an administrator and authenticates via SSO then some of the links do not appear in the admin console (case in point: the "Create user" link).

I assume that there is some check made before rendering these links, to make sure the user is an administrators and should see the links.
This is not working because the user has been authenticated via SSO code not via the standard login page and the user object is not created correctly.

I have had a look at the SSO code and the login page code, and the config files that define the UI but didn't find an answer. I was hoping you could tell me what checks are made and where to find the code that does it.

thanks

-Mike

[missionecm]

Hi all,

My case is reverse one, i am using 3.3.4 EE, integrated with LDAP and NTLM. Now when a admin logged into the web client, he can able to add users from there which is not a good case. could any body help me on this issue.

Best Regards
Maruti Prasad.