How to prevent a site manager from deleting other site manager?

[nwali]

I am using Alfresco Community 5.0.d and in my scenario there is a TestSite where there are 4 people : 1 Admin, 2 Manager and 1 other person. So currently it's allowing one manager to remove another manager where as I want that manager should be able to remove only lower level people and not people at same level. Only admin can remove a manager.

How to achieve this? Which file I need to look into for this?

Thanks in advance

[yogeshpj]

Please have look at site-finder.js file in which they are creating delete action for site if user is site manager.

You can customize it according to your requirement.

[nwali]

Thank you for the reply.

I searched for the file and found at 4 different locations so which one do I need to modify. Also I'm using aio sdk so in that sdk where can I find this file, therefore on mvn install I get share.war (which would contain all the changes).

Thanks again!

[afaust]

You can "hide" the action to remove other managers from the UI like yogeshPJ _ ‌suggests. If you really wanted to prevent this action on the API level (e.g. even via other clients) you would have to add AOP-based extra handling to the SiteService to disallow the operation to change site membership for other SiteManager users. That would restrict Administrators too, but they could always use the AuthorityService to go around this limitation.

[nwali]

Thank you for the reply.

I liked your suggestion as this way manager cannot delete each other but lower level member and admin (having manager level access) can delete manager as well as other member. If I am understanding wrong please correct me.

I am new to alfresco community so could you share any tutorial which would give me better understanding for adding AOP-based extra handling to SiteService and  AuthorityService.

Thanks in advance!

[afaust]

This would not be a customization following standard extension points or best practices and certainly is not something meant for someone just starting out with Alfresco. It involves coding in Java, great care and some understanding of low-level interactions.

Basically what you would do is write a MethodInterceptor (this is an interface to be implemented) for each service, register the as beans in a Spring context file and add references in the public service proxies for SiteService and AuthorityService in a copy of the public-services-context.xml that you could store in the tomcat/shared/classes/alfresco/extension/ folder.

Again, this is advanced customization and I do not recommend it for Alfresco beginners...

[nwali]

By hiding remove button for manager level user then Admin (who is having manager level access) also won't be able to remove other manager's who are having manager level access. Hope you're getting my point.

Do I need to add new permission level like custom-manager? then hide remove button for custom-manager level user?

If you have any tutorial or blog for understanding the coding structure and files of alfresco, please share.