Transfer of permissions,groups from liferay

[finalgrab]

Hello,
we are using alfresco share to colaborate alfresco and liferay. Users log to liferay throw LDAP (shibolet in future) and luckily there creat automatically new accounts in alfresco, thanks to connection between liferay and alfresco.
We now, that with Alfresco Share there are transfered the authentication data. But we wont to move forward and let user see documents depending on which user group there are in (in liferay). Because users are changing very often, it is impossible to edit the group members in alfresco manualy.
Is it possible to restrict access of users to documents/folders depending on their user group membership in liferay?

Thank you

[resplin]

You are confusing where you store your authentication credentials (LDAP) with how you log into a site (Shibboleth single sign-on). Because Alfresco and Liferay can both use the same LDAP server, if both applications get group information from LDAP then both applications will share that group information.

First step is to get Liferay to use LDAP groups for its roles. I am not a Liferay expert, so I can't help you much here, but this forum post looks like it could get you started:
http://www.liferay.com/community/forums/-/message_boards/message/3839137

Next step is to make it so that changing Liferay roles will change LDAP groups. Again I don't know how to do this with Liferay, but if it isn't available out-of-the-box it would be straightforward to do through a simple external LDAP management webapp that is exposed as a portlet in Liferay. You could even use an Alfresco webscript to do the backend LDAP calls.

You will then need to tell Alfresco that you want it to import LDAP groups. The group related configuration options are documented here:
http://docs.alfresco.com/3.4/topic/com.alfresco.Enterprise_3_4_0.doc/concepts/auth-ldap-props.html

Managing groups in Alfresco is documented here:
http://docs.alfresco.com/3.4/topic/com.alfresco.Enterprise_3_4_0.doc/concepts/adminconsole-groups.ht...

Restricting access to a folder in Alfresco based on group membership is described here:
http://docs.alfresco.com/3.4/topic/com.alfresco.Enterprise_3_4_0.doc/tasks/repository-manage-permiss...

Cheers.