a way to forbid acces to a space to a particular user?

[seraphon]

Hi

I know that some would answer my question by saying that I just have to go to more action, manage space users and then untick inherited permission and add the users allowed in this space.

But thats not what I want.
What if, with a continuously evolving user database, you just want to forbid access to some specific people. It would be very unpractical to do the previous method I mentioned and then invite a user each time a new one enters in the user database. I think it would be much faster and less demanding if you had the feature to forbid access to specific users.
In a more technical it would be cool if in a space you have (by inheritance or directly implemented) invited the group EVERYONE with the role consumer and to add a role that would override the consumer role and forbid access to the user chosen.

I think it would be doable following what I did in this post
http://forums.alfresco.com/viewtopic.php?p=22949&highlight=#22949
but I couldnt figure how to create new roles without touching files in the webapp folder so my question is, Is there a way to do such a thing without touching the untouchable webapp files?

Regards
Seraphon

[andy]

Hi

This is not possible - currently any allow - allows.

You would be better off assigning permissions to a group and managing the membership of this group.

Andy

[seraphon]

Hi

So must I conclude that there is no intention to include this in Alfresco?
I think it is a needed feature.
When there are lots of groups and users, it is much easier and faster to forbid access to a few specific users than creating groups specific to spaces and managing users for this group, a management that could involve a hundred users (or more depending on our compqnies growth).

And having to manage a group of users for each space is really not appealing. Of course I m talking here about a worst case scenario, where there are dozens (let us be crazy, hundreds!) of spaces with none having the same group of user with the same permission.

If I were the one to manage the groups in that case, I wouldnt be happy.

Regards
Seraphon

[andy]

Hi

At some point the config will alllow you to choose from "any deny denies" and "any allow allows". Both are valid use cases. We are more along the lines of the unix file system model and not the MS one for this behaviour.

Andy