?guest=true removed

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

thestorm

Hi,

we used ?guest=true so far to generate public download links for non-System users. with 5.0.b this was removed - what is the alternative? The changelog says that webscripts are the way to use, but there is NO webscript that allows guest download.

Did anyone already find a solution?

thanks

afaust

Hello,

technically, there are web scripts that allow guest download. The issue here is that there is no web script (to my knowledge) that allows for the same kind of easy workaround the download servlet had with the ?guest=true URL parameter. The web scripts require either a pre-authenticated session (e.g. authenticated as "guest") or an authentication ticket (e.g. for the user "guest") via URL parameters.
How are your links generated - statically or dynamically? In the latter it should be quite simple to have the generating application obtain a "guest" authentication token and incorporate that into the link URL.
Please be aware that a user can access other web scripts with that token and identity as well - if they know how to build the various URLs of Alfresco.

Or do you want truly anonymous access without requiring actual "guest" access? These are two separate kinds of access after all.
As a final solution you could always set up custom download web scripts with the appropriate <authentication> configuration to require "guest" or "none" for the script, but you may have to manage permissions/<runAs> accordingly to avoid AccessDenied issues.

Regards
Axel