permission for an aspect

[mickaelt]

Hello

I have create 2 aspects: A1 and A2. I want that users of group G1 can see only the aspect A1, and another group G1 can see only the aspect A2. The other group can't see the aspect A1 and A2. Is it possible to implement it in Alfresco? If yes, how can i do it?

Thanks

Mickael

[sdavis]

http://wiki.alfresco.com/wiki/Security_and_Authentication#How_to_add_your_own_type_or_aspect.2C_assi...

[mickaelt]

Thanks sdavis, I read the article

In the permissionDefinitions.xml i create 2 permissionset for my 2 aspects (Person and Company) and 3 roles:
-Mypermission: read the aspect Person
-MypermissionWrite : write the aspect Person and add an aspect Company
-MypermissionAdd : add an aspect Person

<permissionSet type="cm:cmobject" expose="selected">
…

 <permissionGroup name="Mypermission" allowFullControl="false" expose="true" >
   <includePermissionGroup permissionGroup="ReadPerson" type="org:openbluelab_personne_Person" />
 </permissionGroup>

 <permissionGroup name="MypermissionWrite" allowFullControl="false" expose="true" >
   <includePermissionGroup permissionGroup="WritePerson" type="org:openbluelab_personne_Person" />           
   <includePermissionGroup permissionGroup="AddCompany" type="org:openbluelab_personne_Company" />           
 </permissionGroup>

 <permissionGroup name="MypermissionAdd" allowFullControl="false" expose="true" >
   <includePermissionGroup permissionGroup="AddPerson" type="org:openbluelab_personne_Person" />               
 </permissionGroup>
   

</permissionSet>



<permissionSet type="org:openbluelab_personne_Person" expose="selected">
   
 <permissionGroup name="ReadPerson" requiresType="false" expose="true">
   <includePermissionGroup permissionGroup="Read" type="sys:base" />
  </permissionGroup>

  <permissionGroup name="WritePerson" requiresType="false" expose="true">
    <includePermissionGroup permissionGroup="Write" type="sys:base" />
    <includePermissionGroup permissionGroup="Read" type="sys:base" />
  </permissionGroup>

  <permissionGroup name="AddPerson" requiresType="false" expose="true">
    <includePermissionGroup permissionGroup="Write" type="sys:base" />
    <includePermissionGroup permissionGroup="Read" type="sys:base" />
    <includePermissionGroup permissionGroup="AddChildren" type="sys:base"/>
   </permissionGroup>

</permissionSet>

<permissionSet type="org:openbluelab_personne_Company" expose="selected">
   
 <permissionGroup name="ReadCompany" requiresType="false" expose="true">
   <includePermissionGroup permissionGroup="Read" type="sys:base" />
 </permissionGroup>

 <permissionGroup name="WriteCompany" requiresType="false" expose="true">
   <includePermissionGroup permissionGroup="Write" type="sys:base" />
   <includePermissionGroup permissionGroup="Read" type="sys:base" />
 </permissionGroup>

 <permissionGroup name="AddCompany" requiresType="false" expose="true">
   <includePermissionGroup permissionGroup="Write" type="sys:base" />
   <includePermissionGroup permissionGroup="Read" type="sys:base" />
   <includePermissionGroup permissionGroup="AddChildren" type="sys:base"/>
  </permissionGroup>

</permissionSet>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

In Alfresco when i associate to a Space S  the role MypermissionWrite to an user, he can also add an aspect  Person. Same for the MypermissionAdd, the user can add an aspect Company, write the aspect Company and add other content.

How can i define my permission MypermissionAdd to allow :
- to add an aspect Person
- not to add an aspect Company
- to not add other content
- not to write an aspect Company
- not to write other content

MypermissionWrite :
- to write an aspect Person
- to add an aspect Company
- not to add an aspect Person
- not to add other content

Mypermission:
- to read aspect Person
- not to read aspect Company
- not to read other content


Thanks

[seloum57]

Hello,

I have the same problem !

Does somebody have a solution ?

[nicolabeghin]

Any updated on this issue? I'm very interested