Restrict the download and copy to privilege

[muthukumar]

Dear Experts,

I am very new to alfresco. I installed 4.2 community version.

I created a site and i have 4 different user have different privilege like our alfresco standard.

1.Manager.
2.collaborator.
3.contributor.
4.consumer.

As per consumer privilege, he/she able to perform the 'download' and 'copy to' options. I want to restrict that privilege too. Let me how to achieve the above.

Thanks in advance

Regards,
Muthu kumar

[yogeshpj]

You can use evaluator to manage privileges of actions.

[muthukumar]

Dear Yougesh,

Thank you first,

As I said , I am entiry new even i dont know what is evaluator , can u guide me about evaluator?

Muthu Kumar

[sujaypillai]

Hello Muthu,

Please refer these links :
<li>http://wiki.alfresco.com/wiki/Document_Library_Predefined_Evaluators#Action_Evaluators</li>
<li>http://docs.alfresco.com/4.0/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Fconcepts%2FShare-Docli...</li>

Create a class which extends BaseEvaluator as shown below -

public class IsSiteConsumerEvaluator extends BaseEvaluator{
    private static Log logger = LogFactory.getLog(IsSiteConsumerEvaluator.class);
    protected static final String SITE = "site";
    
    /**
     * Returns the current site id OR null if we aren't in a site
     *
     * @param context
     * @return The current site id OR null if we aren't in a site
     */
    protected String getSite(RequestContext context)
    {
        // Look for siteId in url path & parameters
        String site = context.getUriTokens().get(SITE);
        if (site == null)
        {
            site = context.getParameter(SITE);
        }
        if (site == null)
        {
            String[] pathNames = context.getUri().substring(context.getContextPath().length()).split("/");
            for (int i = 0; i < pathNames.length; i++) {
                if (pathNames.equals(SITE) && (i + 1 < pathNames.length))
                {
                    site = pathNames;
                    break;
                }
            }
        }
        return site;
    }
    
    @Override
    public boolean evaluate(JSONObject arg0) {
   try{
      final RequestContext rc = ThreadLocalRequestContext.getRequestContext();
      HttpSession session = ServletUtil.getSession();
      CredentialVault cv = rc.getCredentialVault();
      String currentSite = getSite(rc);
      
      if(cv!=null){
         String userName = (String) session.getAttribute(UserFactory.SESSION_ATTRIBUTE_KEY_USER_ID);
         Connector connector = rc.getServiceRegistry().getConnectorService().getConnector("alfresco", userName, session);
         Response res = connector.call("/api/sites/"+currentSite+"/memberships/" +rc.getUserId());
         logger.debug(">> Membership Response :: " + res);
         if(res.getStatus().getCode() == Status.STATUS_OK){
            String response = res.getResponse();
            JSONParser p = new JSONParser();
            Object obj = p.parse(response);
            logger.debug(">> Object obj value :: " + obj);
            if(obj instanceof JSONObject){
               JSONObject jsonRes = (JSONObject) obj;
               String siteMemberShip = (String) jsonRes.get("role");
               logger.debug(">> Object obj value :: " + siteMemberShip);
               if("SiteConsumer".equals(siteMemberShip)){
                  logger.debug(">> In final if returning TRUE");
                  return true;
               }
            }
         }
      }
   }catch(ConnectorServiceException e){
      e.printStackTrace();
   } catch (ParseException e) {
      e.printStackTrace();
   }

   return false;
    }

}
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Register this bean as you would do for any other class - (say in custom-slingshot-application-context.xml)

     <bean id="evaluator.doclib.action.IsSiteConsumer" class="com.sop.web.evaluator.IsSiteConsumerEvaluator" />
‍‍‍

Then override the action in share-config-custom.xml as below -

   <config evaluator="string-compare" condition="DocLibActions">
      <actions>
          <action id="document-copy-to" type="javascript" label="actions.document.copy-to">
                    <param name="function">onActionCopyTo</param>
               <evaluator negate="true">evaluator.doclib.action.IsSiteConsumer</evaluator>
                    <evaluator negate="true">evaluator.doclib.action.isLocked</evaluator>
                    <evaluator negate="true">evaluator.doclib.indicator.IsReadOnly</evaluator>
           </action>
          <action id="document-download" type="link" label="actions.document.download">
                    <param name="href">{downloadUrl}</param>
                    <evaluator>evaluator.doclib.action.IsSiteConsumer</evaluator>
         </action>
      </actions>
   </config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Hope so that helps you!!!

[muthukumar]

It is really helpful sujay, it is a great effort but i can't understand the java as i dont know about anything because i am working in oracle domain. I understood that you have given whole script. I have a query regarding the term "Register".

what should I do with this java code (do you mean that I should compile and get the executable format?).

Muthu kumar

[sujaypillai]

I have uploaded the jar here - https://github.com/sujaypillai/alfcustomevaluators/blob/master/custom-site-evaluators-0.1.jar

Just copy it to your tomcat/share/lib and restart your alfresco server.