nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Add or Modify roles in Alfresco Community 5

anurags

Hello Everyone,

I am using Alfresco 5 community edition and want to add more roles. Please explain me how can I add more roles or modify exixting roles (ie contributer, consumer etc).

Regards,
Anurag

Find more posts tagged with

Comments

fat_kid

I'm wanting to do the same thing, have you had any success with this?

borisstankov

Hi there,

May be those topics can help you:
http://wiki.alfresco.com/wiki/Permissions_and_Roles_Configuration#Default_Permissions
https://wiki.alfresco.com/wiki/Custom_Permissions_in_Share

Also how customer you wnat to be those roles?
If you define your user groups more accurate, you may use the default groups, because in the new alfreso (5.0.x) they are 2times more then the previous version. Current state of the permissions you cna find here: http://docs.alfresco.com/community/references/permissions_share_components.html

Regards!

fat_kid

Hi Boris,
Thanks for the info, I'd read through those already and this one seems to be the most relevant:
<a href="https://wiki.alfresco.com/wiki/Custom_Permissions_in_Share">https://wiki.alfresco.com/wiki/Custom_Permissions_in_Share</a>
What I'm trying to achieve is a Collaborator permission that applies to content, but not the folder itself.
I.e. the user can create and edit files and folders, but cannot edit the parent folder properties (to rename it for example).
To give a comparison to Windows folder permissions, it's equivalent to Applies to "Subfolders and files only" rather than "This folder, subfolders and files".

In my v5.0d install I wasn't able to find sitePermissionDefinitions.xml anywhere. The wiki post talks about alfresco-repository.jar but I couldn't locate that either when I searched for the filename.
I've just figured out right now that alfresco-repository.jar is called alfresco-repository-5.0.d.jar in my version and located in:
<blockquote>tomcat/webapps/alfresco/WEB-INF/lib/alfresco-repository-5.0.d.jar</blockquote>
I've unzipped this and found the sitePermissionDefinitions.xml in <blockquote>alfresco/model/sitePermissionDefinitions.xml</blockquote> so I'll try and follow the instructions in the wiki and see if I get stuck anywhere else.

Thanks,
Richard

borisstankov

HI,

No problem!
Try to edit the xml file directly in the .jar file - just to be sure that you are on the safe side and the alfresco will be able to read the file after you put it back in the right place with the new xml.

Also on the other hand, you can try this.
1. Setup a group of user, for exmaple "All_Users" - the main one where all users are located and they will be only consumers for the main folder. From Manage Permission click on the "Inherite permissions" button and then add this group "All_users" as consumers.
2. When you create a new subfodler - go to Manage Permissions again and click on the "Inherite permissions" which will disable this subfolder from all users. Add a smaller group of users with Collaborator rightes and see the results.
I thinks this way will be more easier instead of touching the code of the program.

Regards!

fat_kid

Awesome, thanks for the tip about editing the .jar file directly. This worked.

Thanks for your thoughts about group permissions, I am already doing this but the subfolder that has collaborator the users still can rename. This is where I need the permission structure change.
I'll add another post with the steps that I needed to take to make it work, in case anyone else is having this issue.
Basically with your pointer about editing the file within the .jar and the two other files (permissions.get.properties and slingshot.properties) mentioned in the Wiki artile and one more file I found (common.properties) I was able to make it work.

fat_kid

Thanks to Boris, this is the process that worked for me to add Collaborator for subfiles and folders only, not this folder.
I called my role "Content Collaborator".

Find the alfresco-repository.jar file for your version. In v5.0d it is
<blockquote>tomcat/webapps/alfresco/WEB-INF/lib/alfresco-repository-5.0.d.jar</blockquote>
Add your new role. Here's my Content Collaborator definition
<blockcode>
      <permissionGroup name="ContentCollaborator" allowFullControl="false" expose="true">
         <includePermissionGroup permissionGroup="Consumer" type="cm:cmobject" />
         <includePermissionGroup permissionGroup="WriteContent" type="sys:base" />
         <includePermissionGroup permissionGroup="AddChildren" type="sys:base"/>
         <includePermissionGroup permissionGroup="ReadPermissions" type="sys:base" />
      </permissionGroup>
</blockcode>
Make sure you save the changes back into the .jar file.

Next update permissions.get.properties
<blockquote>tomcat/webapps/share/WEB-INF/classes/alfresco/site-webscripts/org/alfresco/modules/documentlibrary/permissions.get.properties</blockquote>
Add your role
<blockcode>
group.SiteContentCollaborator=Content Collaborators
role.SiteContentCollaborator=ContentCollaborator privileges
</blockcode>
Next update the slingshot.properties (to give nice name in invite users)
<blockquote>tomcat/webapps/share/WEB-INF/classes/alfresco/messages/slingshot.properties</blockquote>
Add your role
<blockcode>
role.SiteContentCollaborator=Content Collaborator
</blockcode>
Lastly update common.properties (to give nice name in document library edit properties)
<blockquote>tomcat/webapps/share/WEB-INF/classes/alfresco/messages/common.properties</blockquote>
add your role
<blockcode>
roles.sitecontentcollaborator=Site Content Collaborator
</blockcode>
Restart your alfresco service.

That's it.
Enjoy!

fat_kid

You can also fix your existing sites (as alluded to in the Wiki article) by adding the groups.
You don't have to do anything fancy, just go to Admin Tools > Groups and click Browse. This will show you all the groups. Click the plus button in the top right and add your group name.
e.g. site_mysite_SiteContentCollaborator
This will fix the issue, however it won't be a system group.

If you care about making things neat like I do, and you don't have a complicated permission structure you can do the following:
1, Create a temporary site
2, Move the contents of the document library from your site to the temporary site
3, Delete your site and remove it from Trash (under my profile)
4, Create a new site named the same as your old site
5, Move the contents of the document library from temp site to new site
6, Re-apply any permissions that aren't standard inherited ones

davidbalt

Is there some kind of XML reference for what the possible permissionsGroup sub-elements are? It seems like the linked example is just creating a copy of an existing role; perhaps a good example for the purposes of listing out all the files that need to be changed; but also not really useful in practice. I need to be able to link Active Directory users and groups to specific permissions in Alfresco Share, on a folder-by-folder basis, or even at the level of files. For example, can I assign a permission to a certain user wherever a certain tag or category appears on a file?

davidbalt

Bump? Any guidance on extending the permissions to match AD Users and Groups?

steven_okennedy

Hi davidbalt,

The existing permissions model that Alfresco ships with is available in permissionDefinitions.xml (now held within the alfresco-repository.jar in the /alfresco/model directory). Other extensions, e.g. records management, might supplement or change these as well. If you're looking for what's strictly allowed in that file, there is a permissionSchema.dtd in the same location as well.

However, your question seems more around how to automatically apply permissions based on certain properties, rather than on changing/augmenting the existing permissions/roles model, like the earlier posts in this thread. This can be done using the rules engine by defining rules that apply e.g. on content that has a particular aspect, a particular type, a tag, categogry etc. You may have to together a couple of Javascript snippets to execute as the action to do what you need (e.g Execute Script action). The Javascript API has methods you can use to set permissions on the nodes the rules are being executed on

Regards

Steven

aniruddha

how to restrict the delete option(for his own document) for the contributor role.

aniruddha

how to restrict the delete option(for his own document) for the contributor role.

prashidhashrest

Hello fat_kid _ Nice Work,

I created a custom role as the way you mentioned in your earlier posts. It works fine but I need to add one off permission to the custom role and give it various user.

In my current situation I have created a customer role with collaborator privileges in addition to this I would like also to give, the new role the permission to create user and assign site.

Please guide me on how this can be achieved.

Thanks in advance.

Regards.