nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Role creation

juliocoelho

Hello,

I need to create a role that allows a user to enter a space and read the children spaces, but can't see the files inside the space.

Regards,
JÃºlio

Find more posts tagged with

Comments

jbarmash

You'll have to create a custom role through the permissionDefinitions.xml file. This should not be hard, but does involve understanding how the roles are created and how they work on a pretty detailed level.

Please study the documentation underneath the Security Category:
http://wiki.alfresco.com/wiki/Category

ecurity

Here is an example of roles:
http://wiki.alfresco.com/wiki/PermissionModelDefintionExample
http://wiki.alfresco.com/wiki/Default_Permissions_Model_Reference

juliocoelho

I've tried to create a new Role called xxx, using the following steps:

1st added the following in the permissionsDefinition.xml

      <permissionGroup name="ReadSpaces"  expose="true" allowFullControl="false">
           <includePermissionGroup type="sys:base" permissionGroup="ReadProperties"/>
           <includePermissionGroup type="sys:base" permissionGroup="ReadChildren"/>
      </permissionGroup>
‍‍‍‍‍‍

If you notice I've removed the ReadContent permission and then added the Browsing Role for the cm:cmobject

  <permissionSet type="cm:cmobject" expose="selected">
  …
      <permissionGroup name="Browsing" allowFullControl="false" expose="true" >
          <includePermissionGroup permissionGroup="ReadSpaces" type="sys:base" />
      </permissionGroup>
   </permissionSet>
‍‍‍‍‍‍‍‍

and the Browsing Role for the cm:content

   <permissionSet type="cm:content" expose="selected">
       …
       <permissionGroup name="Browsing" extends="true" expose="true"/>
   </permissionSet>
‍‍‍‍‍‍

Restart the Alfresco Server and if a user only has the Browsing Role on a specif space he still can see the contents of that folder, the idea was to enable the user of that role to browse the space and subspaces without see the contents that the folder has.

Regards,
JÃºlio