[solved] AuthenticationUtil.runAs: how to get ride of this ?

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

zomurn

Hi,

I'am currently coding an evaluator.
When I'am logged as admin, when I navigate in a specific folder, an action evaluator is executed.
Inside, an instruction causes "Bad credentials presented" whereas I'am logged into admin…why ?
This problem occurs on the instruction nodeService.getProperty(something);
The problem is solved with the instruction AuthenticationUtil.runAs(something, "admin");

But how to get "ride of" this "runas" instruction? because, I'am afraid to "pollute" my code always with this….
In other words, I'am pretty sure that the problem comes from a bad xml file configuration dealing with permission on services (acegi security?)
Could you help me to go in depth on this problem ?

Regards !

zomurn

I found the answer here : http://forums.alfresco.com/en/viewtopic.php?f=11&t=1046

And the solution is :

Create a spring bean like follows :

<bean id="MscAbstractEvaluator"
      class="org.alfresco.module.msc.action.evaluator.MscAbstractEvaluator"
      abstract="true">
      <property name="nodeService">
         <ref bean="nodeService" />
      </property>
      <property name="authorityService">
         <ref bean="AuthorityService" />
      </property>
      <property name="authenticationService">
         <ref bean="AuthenticationService" />
      </property>
      <property name="transactionService">
          <ref bean="transactionService"/>
       </property>
   </bean>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

AND NOT like follows :

<bean id="MscAbstractEvaluator"
      class="org.alfresco.module.msc.action.evaluator.MscAbstractEvaluator"
      abstract="true">
      <property name="nodeService">
         <ref bean="NodeService" />
      </property>
      <property name="authorityService">
         <ref bean="AuthorityService" />
      </property>
      <property name="authenticationService">
         <ref bean="AuthenticationService" />
      </property>
   </bean>‍‍‍‍‍‍‍‍‍‍‍‍‍

NOTICE : NodeService is a heavy proxied object contains the security interceptor (and more). I need to get ride of this interceptor so I need to explode the NodeService (in public-service-context.xml).
The basis of NodeService is nodeService (in node-service-context.xml). nodeService is the real alfresco business code.
So I reference a "nodeService" bean and not a "NodeService" bean.
The problem now, is that I need the nodeService in transaction inside my action executer impl. So I have to add the transaction service (the unproxied one !) and then execute the use of nodeService inside this transaction.
The java resulting code is :

private boolean evaluateGeneric(final Node pNode) throws Exception {

      RetryingTransactionHelper txnHelper = transactionService
            .getRetryingTransactionHelper();
      RetryingTransactionCallback<String> callback = new RetryingTransactionCallback<String>() {

         public String execute() throws Throwable {

            // on récupère l'état en cours
            return (String) nodeService.getProperty( pNode.getNodeRef(),
                  MscPropertyEnum.PROPERTY_ETAT.getPropertyName() );
         }
      };
      try
      {
         String lEtat = txnHelper.doInTransaction( callback, false, true );

         if (log.isDebugEnabled())
         {
            log.debug( "lEtat" + lEtat );
         }
         MscStateEnum lEtatEnum = MscStateEnum.valueOf( lEtat );

         if (log.isDebugEnabled())
         {
            log.debug( "Current state: " + lEtatEnum );
         }

         // on récupère les actions autorisées associées
         List<MscActionEnum> lActionList = lEtatEnum.getActionList();

         if (log.isDebugEnabled())
         {
            log.debug( "Available actions: " + lActionList );
         }

         return lActionList.contains( getAction() );
      }
      catch (Exception e)
      {
         if (log.isDebugEnabled())
         {
            log.debug( e );
         }
      }

      return false;

   }‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Regards,