Permissions Assigned to External Users not work

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

The_Mars_Mars

After sharing a document with an external user without login, the email is sent correctly to the recipient, however, when clicking on the email link, you are always redirected to the login screen. It is not possible to view the document without logging in to the platform. This is a core function of the platform, is there any additional configuration that must be done for this feature to work?

Phil_Ludlow

External sharing (aka. Instant Share) uses "TOKEN_AUTH" in the auth config, so make sure that you include it in your authenticationChain. See code here:

https://github.com/nuxeo/nuxeo/blob/10.10/nuxeo-services/nuxeo-platform-web-common/src/main/resources/OSGI-INF/authentication-contrib.xml#L51

If you have customized the auth config then you need to make sure that TOKEN_AUTH is before FORM_AUTH. Hopefully this solves your issue. Something like this (not sure what authentication methods you are using though).

<extension target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService" 
point="chain">
	<authenticationChain>
		<plugins>
			<plugin>BASIC_AUTH</plugin>
			<plugin>TOKEN_AUTH</plugin>
			<plugin>FORM_AUTH</plugin>
		</plugins>
	</authenticationChain>
</extension>