Hi, I'm trying Alfresco out, in order to check if it's suitable for my company, and there is something I do not like: Users are able to edit any accessible file in shared files. This is how I have set it up: * I have created a group named "students". * I have created two users: "Adrian" and "Paul". * I have assigned those two users to the group "students". * I have created a new folder in Shared Files, and I have edited its permissions in order to make it available for anyone who is in "students" group only (with the Collaborator role). * I have logged in as "Adrian", and I have uploaded a file inside the folder. * I have logged in as "Paul", but that user is able to edit the file which was uploaded by "Adrian": Is there any way disable those options for users who do not own a file? Thanks in advance!

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to disable edit permissions on files that a user does not own (in Shared Files)?

Adrian2895

Hi,

I'm trying Alfresco out, in order to check if it's suitable for my company, and there is something I do not like: Users are able to edit any accessible file in shared files.

This is how I have set it up:

I have created a group named "students".
I have created two users: "Adrian" and "Paul".
I have assigned those two users to the group "students".
I have created a new folder in Shared Files, and I have edited its permissions in order to make it available for anyone who is in "students" group only (with the Collaborator role).
I have logged in as "Adrian", and I have uploaded a file inside the folder.
I have logged in as "Paul", but that user is able to edit the file which was uploaded by "Adrian":

Is there any way disable those options for users who do not own a file?

Thanks in advance!

Find more posts tagged with

Alfresco Content Services

Accepted answers

fedorow

The default roles described in documentation. For example the permissions on content are in the table - Content permissions

In addition, Alfresco custom roles can be created with a lot of combinations of different permissions:

Permissions and roles Extension Point

All comments

fedorow

Shared folder by default have permissions for EVERYONE as Coordinator - full access. You can change it or remove inherit for your new folder in Shared Files. But as Coordinator of Shared folder EVERYONE can change this permission to any.

So use sites, as a natural way to manage collaboration in Alfresco.

Adrian2895

@fedorow wrote:
Shared folder by default have permissions for EVERYONE as Coordinator - full access. You can change it or remove inherit for your new folder in Shared Files. But as Coordinator of Shared folder EVERYONE can change this permission to any.
So use sites, as a natural way to manage collaboration in Alfresco.

Hi, thanks for your reply. I have created a new site, and I have added "students" group as collaborator, but users still have edit permissions over a file they do not own.

Maybe my main message was misunderstood... I want to disable "Edit properties", "Upload new version", and "Start Workflow" options for those users who have not uploaded the file. So if "Adrian" uploads X file, only "Adrian" should have those options, since he has uploaded the file.

I hope I have explained correctly what I need now...

fedorow

The default roles described in documentation. For example the permissions on content are in the table - Content permissions

In addition, Alfresco custom roles can be created with a lot of combinations of different permissions:

Permissions and roles Extension Point

Adrian2895

@fedorow wrote:
The default roles described in documentation. For example the permissions on content are in the table - Content permissions
In addition, Alfresco custom roles can be created with a lot of combinations of different permissions:
Permissions and roles Extension Point

I have just checked both links. Apparently, the best role for what I wanted is Contributor. I do not see the need of creating a custom one for now. I am accepting your answer as the solution. Thanks for your help and have a good day!