cancel
Showing results for 
Search instead for 
Did you mean: 

User rights after export from LDAP

grome
Champ in-the-making
Champ in-the-making
Hi (again Smiley Tongue),
After the LDAP export i try to connect with a user (who has been export from LDAP) to alfresco and i succeed.
But i can't do anything with this user, there is nothing in the "create" menu, what i have to do resolve this ?

Regards,
Jerome.
6 REPLIES 6

andy
Champ on-the-rise
Champ on-the-rise
Hi

The users do not have permission to create anything.

You need to add permissions for the users' home space(s).

Regards

Andy

grome
Champ in-the-making
Champ in-the-making
Hi Andy,

If what you say is true, why when i create a new user in alfresco he has basic permissions ?
I juste want that when the users who are in my LDAP are exported to alfresco, they have the sames permissions as when i create a user in alfresco.

How can i do that ?

Regards,
Jerome.

andy
Champ on-the-rise
Champ on-the-rise
Hi

At the moment we are not creating a new home space for every user pulled in from LDAP.

This is on the list but was given low priority.

You could set permissions on a common folder for new users (and set this in the LDAP import stuff). Set permissions on this for a well known group. Add users to this group in ldap. All the users pulled out of LDAP would be in this group and have the group permission.

Hope this helps

Andy

grome
Champ in-the-making
Champ in-the-making
Thanks a lot Andy,
I will try this Smiley Wink

Could you reply to theses posts please :

http://forums.alfresco.com/viewtopic.php?t=1765
http://forums.alfresco.com/viewtopic.php?t=1759

Regards,
Jerome.

grome
Champ in-the-making
Champ in-the-making
Hum, i don't understand something :
in the bean ldapPeopleExportSource i have this :

<property name="defaultHomeFolder">
                <value>/app:company_home</value>
        </property>

So, the users should have acces to company_home, shouldn't they ?

Regards,
Jerome.

andy
Champ on-the-rise
Champ on-the-rise
Hi

The import does not set permissions on company_home for each user.

If you add all users to "GroupA" you could then assign a permission for "GroupA" on company_home. A presume you want some users to have read access , some contributor etc …..you can partition the users by group.

Cheers

Andy