Permissions based on custom type

[3acascia]

Hi All,

it is possibile in Alfresco Share to invite some users to join a site, enabling them to access only certain types of contents?
Maybe I've to customize the <b>sitePermissionsDefinition.xml</b> file adding something like this

   <permissionSet type="st:site" expose="selected">
       <permissionGroup name="MyGroup" allowFullControl="false" expose="true">
            <includePermissionGroup permissionGroup="Consumer" type="myprefix : mytype" />
      </permissionGroup>  
‍‍‍‍‍‍

Any help is appreciated.

Thanks in advance,
Toma

[andy]

Hi

It is not possible to restrict access by type in a simple way.
It can be done - see the RM module for an example.
It involves implementing parts of the security layer that wraps public services.

Andy

[3acascia]

Hi Andy,

thanks for your reply.
Can you suggest me, if you know any, internet tutorial about this kind of Alfresco customization?

Thanks you in advance,
Toma

[scouil]

Hi,

Andy's approach is probably the cleanest and most efficient way to do it.

A maybe easier possibility to do it would be with a custom behavior or a folder rule triggering on nodes of a certain type being created.
In your script, you then have control over the node and can dynamically add the permissions you like.
Keep in mind that with this solution, your permissions wouldn't be enforced in the security layer and they can be modified through the UI as any permission.

[3acascia]

Hi Scouil,

Thanks you for your advice.
I think that I will try to implement the Andy's solution.

Regards,
Toma

[andy]

Hi

The best place to look is the RM module - start at the security context replacement.
Very few people have had to resort to this approach - so the best guide is the most concrete example.

Andy