I would like to be able to perform CMIS actions against Alfresco as an impersonated user. I am aware that CMIS does not specify any functionality re user impersonation. I was hoping to achieve something like this:
Login to Alfresco via REST API or Web Script as the admin.
Impersonate the target user
Create a login ticket for the target user
Execute a CMIS service method (e.g. getChildren()) against Alfresco using the target user's username and login ticket
I'd like to do this so that users can login to my webapp, click a button in it and this will trigger a CMIS method. My app utilises Kerberos authentication via Spring Security so I would have the authenticated username but no password.
The questions that I have are:
Does the REST API provide a getLoginticketForUser() type method? If not then I guess I'll have to create a WebScript to do this via AuthenticationUtil.setCurrentUser().
Can I pass login tickets instead of the password to Alfresco's CMIS service?
