nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Custom role to view all the space hierarchy

nikes

Hello,

We have a requirement to create a custom role who can view all the spaces and subspaces, even if "Inherit Permission" is disabled and user not invited.

Well, just like Administrators can view all the spaces without invitation. But We need a role less than Administrator, just who can view all the spaces.

Is it possible through configuring permissionDefinition.xml ? or tweaking org.alfresco.repo.security.permissions.impl.PermissionServiceImpl.java ?

Thanks,
Nikesh

Find more posts tagged with

Comments

mitpatoliya

Well,I think it will not be possible through the permissionDefinition.xml as whatever may be the role you define in there that role you need to explicitly go and assign to the user on particular space via webclient only admin has by default access on all the spaces.

nikes

Correct.

May be somehow at Java code level it bypasses permission check for ADMINISTRATORS? not sure.

I am thinking adding a custom role in permissionDefinition.xml and then somewhere at java level hardcoding custom role to bypass permissions check similar to ADMINISTRATOR if possible.

mitpatoliya

Please share it across if you find the way to do this.
It will be really a useful feature.

nikes

There are many java classes in alfresco's security package.

Any hint how permission evaluation happens when a user navigates in repository?