nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Best practice for disabling anonymous access

jobjob

Hi,

I'am looking for the best (simple) way to disable all anonymous access (for example https://xxxx/service/index) on an alfresco 3.2 server installed on tomcat.
Is there a simple way to do this (by simple i mean without using an apache front-end or things like that) ?

Any ideas or pointers are welcome …

Jeff

Find more posts tagged with

Comments

norgan

Does ht.access work ?

jobjob

Hi,

Does ht.access work ?

I can, but i would prefer a "tomcat only" solution (i.e. without apache, and without need to reauthenticate).

Perhaps i can add something like this in server.xml file

   <filter-mapping>
      <filter-name>Global Authentication Filter</filter-name>
      <url-pattern>/*</url-pattern>
   </filter-mapping>
‍‍‍‍‍‍

However
1) I don't know the impact on url-pattern that using other mapping (for example "/wcs/*" is using "WebScript Authentication Filter")

2) I suppose there is a cleaner solution (i.e. more integrated in alfresco's frameworks) but i didn't found it (i'am not a Spring/Struts/Java guru) …

Regards,

Jeff

dward

Have you tried

alfresco.authentication.allowGuestLogin=false

?

jobjob

Hi,

Have you tried

alfresco.authentication.allowGuestLogin=false

?

Yes, but this option disable only the guest access to (for example) alfresco web client.
Some url (like http:/xxxxx/alfresco/service/index) are always available and it's possible to for example to browse the web script repository which contain home made scripts.

Jeff

pmisra

yes, putting the following line into the alfresco-global.properties enables anonymous access to the content. It works great, Thanks!!!

alfresco.authentication.allowGuestLogin=true‍