Can ACS/Community create a Site with "Write Only" permissions like a blind DropBox?

[michaelzietlow]

Trying to dig up some documentation that allows me to create a 'Site' where a 'Group' has 'WRITE ACCESS' to upload a document or jpg but NO 'READ ACCESS' to see what anyone uploaded except the Group Manager. 

Can ACS/Community create a Site with "Write Only" permissions like a blind DropBox?

[michaelzietlow · Accepted solution]

I think I found a solution using 2 Alfresco Sites.


PRIVATE/READ-ONLY Site1

1. Created a Private site called PRIVATE.

2. Created a Folder in it called "Incomming"

3. Assigned the person I wanted to have Read Access with Manager Access to the site

4. Removed Admin from from Members so only the Manager can read the content of folder.

PUBLIC/READ-WRITE Site2

1. Created a Public Site called PUBLIC

2. Created a Folder in it called Outgoing

3. Assigned All Users 'contributor' access to the Site

4. On the Outgoing folder I clicked 'manage rules'

5. Under 'Perform Action' I select 'Move to folder'

6. Move to PRIVATE / Incomming.

Now when a Member of the PUBLIC Site uploads a file into the Outgoing folder, the move rule immediately moves it to PRIVATE /  Incomming folder that only a single person/group can read.

The only issue I have now is conributors have the ability to upload files into the ROOT of document library, not understanding they need to click on the Outgoing folder where the move rule is applied.  Alfresco does not appear to allow Rules to be added to the root of the Document libary, only folders...

SUB QUESTION:  Is there a way to allow users to upload to folders but NOT upload into the root of a document libary?

[michaelzietlow · Accepted solution]

I think I found a solution using 2 Alfresco Sites.


PRIVATE/READ-ONLY Site1

1. Created a Private site called PRIVATE.

2. Created a Folder in it called "Incomming"

3. Assigned the person I wanted to have Read Access with Manager Access to the site

4. Removed Admin from from Members so only the Manager can read the content of folder.

PUBLIC/READ-WRITE Site2

1. Created a Public Site called PUBLIC

2. Created a Folder in it called Outgoing

3. Assigned All Users 'contributor' access to the Site

4. On the Outgoing folder I clicked 'manage rules'

5. Under 'Perform Action' I select 'Move to folder'

6. Move to PRIVATE / Incomming.

Now when a Member of the PUBLIC Site uploads a file into the Outgoing folder, the move rule immediately moves it to PRIVATE /  Incomming folder that only a single person/group can read.

The only issue I have now is conributors have the ability to upload files into the ROOT of document library, not understanding they need to click on the Outgoing folder where the move rule is applied.  Alfresco does not appear to allow Rules to be added to the root of the Document libary, only folders...

SUB QUESTION:  Is there a way to allow users to upload to folders but NOT upload into the root of a document libary?

[michaelzietlow · Accepted solution]

!UPDATE!   -    NOT SOLVED    -

Oops, I spoke too soon!     I didn't test this with a normal user, just my own which had access to OUTGOING and INCOMING (of course it worked)...

You can not move a file from one Site to another Site that the person uploading does not have access to.

I don't know if this is possible OOTB with Alfresco.

Wish there was an "Admin Move" 

[venur]

Not possible but if you execute the step via system user it may work

[michaelzietlow]

Nope, tried that. 

    If the system user doesn't have read access it will not come up as selectable in the list of sites you want to move files to.

[venur]

system user is a no login usr and giving read/write to the user doesn't cause harm to workflow you in my opinion.