Add or Modify roles in Alfresco Community 5

[anurags]

Hello Everyone,

I am using Alfresco 5 community edition and want to add more roles. Please explain me how can I add more roles or modify exixting roles (ie contributer, consumer etc).

Regards,
Anurag

[fat_kid]

You can also fix your existing sites (as alluded to in the Wiki article) by adding the groups.
You don't have to do anything fancy, just go to Admin Tools > Groups and click Browse. This will show you all the groups. Click the plus button in the top right and add your group name.
e.g. site_mysite_SiteContentCollaborator
This will fix the issue, however it won't be a system group.

If you care about making things neat like I do, and you don't have a complicated permission structure you can do the following:
1, Create a temporary site
2, Move the contents of the document library from your site to the temporary site
3, Delete your site and remove it from Trash (under my profile)
4, Create a new site named the same as your old site
5, Move the contents of the document library from temp site to new site
6, Re-apply any permissions that aren't standard inherited ones

[davidbalt]

Is there some kind of XML reference for what the possible permissionsGroup sub-elements are?  It seems like the linked example is just creating a copy of an existing role; perhaps a good example for the purposes of listing out all the files that need to be changed; but also not really useful in practice.  I need to be able to link Active Directory users and groups to specific permissions in Alfresco Share, on a folder-by-folder basis, or even at the level of files.  For example, can I assign a permission to a certain user wherever a certain tag or category appears on a file?

[davidbalt]

Bump?  Any guidance on extending the permissions to match AD Users and Groups?

[steven_okennedy]

Hi davidbalt,

The existing permissions model that Alfresco ships with is available in permissionDefinitions.xml (now held within the alfresco-repository.jar in the /alfresco/model directory). Other extensions, e.g. records management, might supplement or change these as well. If you're looking for what's strictly allowed in that file, there is a permissionSchema.dtd in the same location as well.

However, your question seems more around how to automatically apply permissions based on certain properties, rather than on changing/augmenting the existing permissions/roles model, like the earlier posts in this thread.  This can be done using the rules engine by defining rules that apply e.g. on content that has a particular aspect, a particular type, a tag, categogry etc.  You may have to together a couple of Javascript snippets to execute as the action to do what you need (e.g Execute Script action). The Javascript API has methods you can use to set permissions on the nodes the rules are being executed on

Regards

Steven

[prashidhashrest]

Hello fat_kid _ Nice Work,

I created a custom role as the way you mentioned in your earlier posts. It works fine but I need to add one off permission to the custom role and give it various user.

In my current situation I have created a customer role with collaborator privileges in addition to this I would like also to give, the new role the permission to create user and assign site. 

Please guide me on how this can be achieved.

Thanks in advance.

Regards.