Role and Rule Management

[fthamura]

I just searching Alfresco Role Management and Space management model, i cannot see the relationship between role and rule in alfresco.

can help?

and of course what kind of rule management in Alfresco implemented? Will Drools.org model or the others stuff?

[paulhh]

We are not using another rule engine - we wanted something very simple for users to configure, so implemented our own. 

The relationship between roles and rules is that for a rule to run when a user performs an action, they must have the rights for the resulting action (e.g. creating a transformation somewhere).  We're going to look at "run as" features, but we have to be very careful that security is absolutely watertight.

Cheers
Paul.

[paulkeane]

Further to that, how are these roles enforced when the users are based in LDAP?

I understand that as part of the synchronisation process between Alfresco and LDAP, an import .xml file is created which is then imported into Alfresco's local repository.

My question is, how are the roles (i.e. Editor, Collaborator) then enforced in the Enterprise Edition?

Please advise,

Kind Regards,

Paul

[paulhh]

Hi Paul

When you invite somone or a group into a space or content then that is when you define what role they can play in/on it.

It doesn't matter where the authentication for the user is coming from (NTLM, LDAP, AD), there will be a corresponding "person" in Alfresco, likewise for groups - whether the person data and groups data is there via synchronization with LDAP doesn't change things.

Cheers
Paul.