nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

permission for an aspect

mickaelt

Hello

I have create 2 aspects: A1 and A2. I want that users of group G1 can see only the aspect A1, and another group G1 can see only the aspect A2. The other group can't see the aspect A1 and A2. Is it possible to implement it in Alfresco? If yes, how can i do it?

Thanks

Mickael

Find more posts tagged with

Comments

sdavis

http://wiki.alfresco.com/wiki/Security_and_Authentication#How_to_add_your_own_type_or_aspect.2C_assign_permissions_for_it.2C_configure_it_and_secure_a_service_that_uses_it_....

mickaelt

Thanks sdavis, I read the article

In the permissionDefinitions.xml i create 2 permissionset for my 2 aspects (Person and Company) and 3 roles:
-Mypermission: read the aspect Person
-MypermissionWrite : write the aspect Person and add an aspect Company
-MypermissionAdd : add an aspect Person


<permissionSet type="cm:cmobject" expose="selected">
…

 <permissionGroup name="Mypermission" allowFullControl="false" expose="true" >
   <includePermissionGroup permissionGroup="ReadPerson" type="org:openbluelab_personne_Person" />
 </permissionGroup>

 <permissionGroup name="MypermissionWrite" allowFullControl="false" expose="true" >
   <includePermissionGroup permissionGroup="WritePerson" type="org:openbluelab_personne_Person" />           
   <includePermissionGroup permissionGroup="AddCompany" type="org:openbluelab_personne_Company" />           
 </permissionGroup>

 <permissionGroup name="MypermissionAdd" allowFullControl="false" expose="true" >
   <includePermissionGroup permissionGroup="AddPerson" type="org:openbluelab_personne_Person" />               
 </permissionGroup>
   

</permissionSet>



<permissionSet type="org:openbluelab_personne_Person" expose="selected">
   
 <permissionGroup name="ReadPerson" requiresType="false" expose="true">
   <includePermissionGroup permissionGroup="Read" type="sys:base" />
  </permissionGroup>

  <permissionGroup name="WritePerson" requiresType="false" expose="true">
    <includePermissionGroup permissionGroup="Write" type="sys:base" />
    <includePermissionGroup permissionGroup="Read" type="sys:base" />
  </permissionGroup>

  <permissionGroup name="AddPerson" requiresType="false" expose="true">
    <includePermissionGroup permissionGroup="Write" type="sys:base" />
    <includePermissionGroup permissionGroup="Read" type="sys:base" />
    <includePermissionGroup permissionGroup="AddChildren" type="sys:base"/>
   </permissionGroup>

</permissionSet>

<permissionSet type="org:openbluelab_personne_Company" expose="selected">
   
 <permissionGroup name="ReadCompany" requiresType="false" expose="true">
   <includePermissionGroup permissionGroup="Read" type="sys:base" />
 </permissionGroup>

 <permissionGroup name="WriteCompany" requiresType="false" expose="true">
   <includePermissionGroup permissionGroup="Write" type="sys:base" />
   <includePermissionGroup permissionGroup="Read" type="sys:base" />
 </permissionGroup>

 <permissionGroup name="AddCompany" requiresType="false" expose="true">
   <includePermissionGroup permissionGroup="Write" type="sys:base" />
   <includePermissionGroup permissionGroup="Read" type="sys:base" />
   <includePermissionGroup permissionGroup="AddChildren" type="sys:base"/>
  </permissionGroup>

</permissionSet>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

In Alfresco when i associate to a Space S the role MypermissionWrite to an user, he can also add an aspect Person. Same for the MypermissionAdd, the user can add an aspect Company, write the aspect Company and add other content.

How can i define my permission MypermissionAdd to allow :
- to add an aspect Person
- not to add an aspect Company
- to not add other content
- not to write an aspect Company
- not to write other content

MypermissionWrite :
- to write an aspect Person
- to add an aspect Company
- not to add an aspect Person
- not to add other content

Mypermission:
- to read aspect Person
- not to read aspect Company
- not to read other content

Thanks

seloum57

Hello,

I have the same problem !

Does somebody have a solution ?

nicolabeghin

Any updated on this issue? I'm very interested