How to restrict user to search for site-member of that site only rather than all?

[nwali]

I am new to Alfresco and using Alfresco Community 5.0.d & aio sdk for customising the application.

I am not able to get a way to restrict user of Site-A to search & see only Site-A members where as in current scenario if user search for member in Site-A then the result comes combined from Site-A, Site-B and so on.

Thanks in advance.

[afaust]

Sure - there have to be trade-offs to extreme & clean isolations, but I would assume that minor admin inconvenience may be acceptable if proper security can be provided. Also, a solution based on multi-tenancy can theoretically be extended with manageable effort - and without as many risks as fiddling with security definitions - to collect status data from each tenant and provide an overview for the global admin, as well as allow a convenient "switch to same user in tenant X" function to be developed.

The problem with your use case is that it is not something that most people will ever have to deal with and as a result you will not find any blog, tutorial etc. that deals with those kind of implementation changes to safely get started yourself. Douglas and myself only know how we would deal with such a use case only from years of tinkering with the software ourselves, and we know the associated risks from various times we shot ourselves in the foot.

[idwright]

Totally agree - I'm not that comfortable with doing it like that and I wrote it in the first place! 

We have quite a small and lightly used instance but it does work for us.

I agree it's best not to mess with it and stick with the default behaviour if possible.

As I've said elsewhere - I'm happy for people to look at and use that code but be aware that it was not written with the purpose of being more widely released and should be treated with great care.(I work on Alfresco on my own, part of my time, on community edition and am largely making it up as I go along...)

[nwali]

Thank you Axel Faust and Ian Wright‌  for your time and comment. I would go with the tenant feature to achieve the restriction as messing around with security changes will take a long time.

Thanks.