Permissions in Alfresco

[sofia]

Hello,

I've created two spaces in an Alfresco site : Folder A and 2 Sub-Folders B and C.
At the same time I ve defined an hierachy of groups : Group A and 2 sub Groups (B and C).
For the Folder A I have invited the group A
For the folder B -> group B
For the folder C -> group C

I made some tests:
The users of group B : can access the folder B and A , and can't access folder C.
But for the users of the group A, they can't access any of the folders B and C . Even if group A contains the group B and C.

How can I give the users of the group A , the permissions to access both of folders B and C ?? And at the same time keeping the fact that the users of group B shouldn't access folder C and vice-versa.

Regerds,
Sofia.

I m using Alfresco 5.0

[afaust]

Hello,

for thise use case, you should probably put the users that are member of group A but not B or C into a new sub-group D, which you can then add to the folders B and C. So in the end, everyone has access to folder A because of being an indirect member of group A, only group B and D have access to folder B and only group C and D have access to folder C.

Regards
Axel

[sofia]

Thank you , I have already tried this , but I need to do it dynamically. Because the structure of my repository is huge , I have many other subFolders of those folders (Under B and C ) and other subGroups of those groups. So I need a dynamic mecanism to accomplish that

[afaust]

Well - the same thing can be done dynamically. You just need to write the code for it, e.g. using an action or a policy. You can choose to use Java or JavaScript. The basic principle of the advice still holds…

[sofia]

Thank you M.AFaust for the reply , I m asking you to tell me about the files I need to modify , eventually create , in odrer to accomplish this ? Currently I have no idea about how to start working on this

[darkredd]

If you are still asking for the files to edit, I would suggest you read-up on a few things first. That being said; I would suggest you take the policy (rule) route which would be much simpler to do. Now, since you want to dynamically assign these groups to your large folder structure; I would assume you have some kind of marker on your folder to identify which group sees which folder. If you write a js file with the logic to assign those groups as suggested by Alex, you can then run a policy using your script to assign your groups.

[sofia]

Thank you DarkRedd, it seems to be a good way to achieve that. I'll try to create a js file , where I ll use alfresco api for groups and permissions , and then try to give the users of these groups the permissions on the folders