PermissionService: hasPermission for other user than current

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

unknown

Hello,

I am looking for something similar to what PermissionService#hasPermission does, but not for the currently logged-in user. Basically, I would like to traverse the whole repository (as the administrator) and keep track of what user can access what documents. Given the public API I can only see two ways;

1. Log in as each user and traverse what's possible, which has the disadvantage that it needs each user's password in plain text.

2. Parse the AccessPermission objects myself to determine who has access, which is somewhat fragile (but is what I'm doing right now).

As far as I can see, I would need to extend/replace the PermissionServiceImpl to avoid the dangerous code duplication of 2.—or am I missing a straightforward way?

TIA,

Julian

hbf

Hi Julian,

I am looking for something similar to what PermissionService#hasPermission does, but not for the currently logged-in user.

I've had a similar problem and found a post about this here.

As far as I can see, I would need to extend/replace the PermissionServiceImpl to avoid the dangerous code duplication of 2.—or am I missing a straightforward way?

The above post mentions another way (AuthenticationUtil RunAs support), but as the number of users in need for this feature seems to grow, you might want to open a JIRA issue (where people can vote for the feature – although I don't know whether this is currently honoured).

Hope this helps,
Kaspar