How to restrict other user login in nuxeo? Only administrator can login and access to nuxeo.

[veera_]

Hi,

I have a problem in nuxeo-5.3.1(JBoss).

Administrator can create users and groups in nuxeo.

Only administrator can login and access to nuxeo, other users should not login in nuxeo.

How to restrict other user login in nuxeo?

Can any one help me?

[Julien_Carsique]

Why don't you want users to log in Nuxeo whereas the Administrator creates their accounts into Nuxeo?

[veera_]

Hi,

[Julien_Carsique]

The UIs you defined to expose features to users should not be used to manage security access to documents. You must set the right permissions on the documents to ensure a use have the wanted permissions on a given document, independently of the UI used.

If you need to store "common" documents, then you must describe more precisely your use case and probably store them somewhere else than in the default domain or workspace.

You can also use a specific HTTP configuration (in your HTTP server, ie. Apache) in order to forbid or restrict some URLs and redirect the users to the wanted URL (and its associated UI).

[Anahide_Tchertc · Accepted solution]

You can contribute a specific login module that will implement your own access rules (like checking if user is an administrator.

Documentation is here for your version: http://community.nuxeo.com/5.3/books/nuxeo-book/html/auth-users-groups.html#authentication-framework and you can take example on default login modules even if they're probably implementing more complicated logics than what you need to do.

[veera_]

Hi,

[Benjamin_Jalon1]

Look my answer here

[veera_]

Hi,

[veera_]

Hi bjalon, Julien Carsique & Anahide Tchertchian,