Remove admin permission

[felipei2k]

Hey!

Am cotumizing an Alfresco 3.4a, and i got a problem. It is possible to remove permission to an admin user?
I need to save document in Alfresco, but only some user car read it. And i need that the admin user could not read this documents.
I had tried something like:
document.removePermission("All", "ROLE_OWNER");
document.removePermission("Consumer", "GROUP_EVERYONE");

But, it give me this error when im creating the document: 10150010 Failed to execute script 'workspace://SpacesStore/5bdd7565-8858-4d4a-8534-01c07678e635': Can not delete from this acl in a node context SHARED.

By the way, am creating the document with admin user.


Thanks a lot!

[kevinr]

Any member of the admin group will still be able to Read the doc - they always have permissions on a node - that is what the special admin group is for.

Cheers,

Kev

[repattila]

You could edit permissionDefinitions.xml (or better make a custom one in extensions) and remove the full control rights from admin group (and define some less but still powerfull enough rights), however admin group will still have the right to manage system groups and users, so an admin could make himself part of a group, that has read permissions so that aspect should be addressed through auditing i think.