Share Security and Tags

[eleaese]

We use Alfresco 3.2 Community. We are setting some Share Sites for managing different customers and their projects. We invite Users through Share, they accept, everyone is happy.

However, if any user access Alfresco with Alfresco Explorer, he/she could view Company Home, the Site space, and the sites from other customers, because Alfresco security includes EVERYONE as Consumer on Company Home.

We changed this, removing EVERYONE from Company Home, and giving the persmision to Data Dictionary and some other space. It worked as expected, when a user logs with Explorer, Company Home isn't visible for browsing.

But it has a side effect on Share tags. After the change, on every site, users get the message "Failure Could not retrieve tags", the Tags category on the left hand area is empty. Editing metadata of existing documents or adding new documents allow the creation of tags.

Is there a way to overcome the problem ?. May be creating custom permissions ?. Or do we need to fill a JIRA Issue ?




Out of the box Alfresco gives EVERYONE "read" access to Company Home.

[norgan]

You need to allow access to the tag tree again, I guess. Otherwise, check out which scripts are involved, if the user can still access those. E.G. remove the rights of "data dictionary" but add all rights to a level deeper manually.

Hope, that helped, let us know, when it works.
Norgan

[gman]

Changing default security breaks a lot of things in Alfresco. I would recommend doing a lot of testing before doing anything in production in Alfresco. Really try to think of all the different scenarios that you want to exist for security or areas that you want to hide from users. You will think you have everything figured out and will come across something that is broken.