I want to add Bulk users to Groups and Provide Roles and permissions through ACL by automated script

piyush48

I wanted to add Bulk users to Groups and provide roles and permissions through ACl to them. I have a csv file of users with me. Please guide by how i can do all this in one script or java file. As i am new to it thus it is ver difficult to understand some terms of ACL too but i am trying so plz guide me that how can i implement this all in one backend file and location for where to implement in share-war file.

Thanks.

abhinavmishra14

It is not possible OOTB. I am not aware of any add-on which can perform the task of adding users to groups in bulk. However, you can create a custom webcript which will take excel/csv/xml/json file as input, find the Person node using the user's id and then lookup for the group node using Groupname (full qualified group name) and then add the respective user to that group. 

If you are not aware of how a webscript is created and consumed, Refer this tutorial: https://ecmarchitect.com/alfresco-developer-series-tutorials/webscripts/tutorial/tutorial.html 

Here are the steps you would do in your webscript:

1- Use the PersonService to find the person node based on userId. You would be parsing the input to get the user id.

final NodeRef personNodeRef = personService.getPerson(userId);

2- Use the AuthorityDao to get the group node. You would be parsing the input to get the groupName. Note that Group name must start with "GROUP_". For example group in alfresco is CONTENT_EDITORS then your payload either pass "GROUP_CONTENT_EDITORS" or you must build full qualified group name in your webscript before calling the "getAuthorityNodeRefOrNull" method. 

final String groupFQN = groupName.contains("GROUP_") ? groupName
: "GROUP_"+ groupName;

final NodeRef groupNodeRef = authorityDAO.getAuthorityNodeRefOrNull(groupFQN);

3- Once you have group node and person node. The below given snippet can be used to add the user to group.

if (nodeService.getType(groupRef).equals(ContentModel.TYPE_AUTHORITY_CONTAINER)) {
   final String parentGroupName = (String) nodeService.getProperties(groupRef).get(ContentModel.PROP_AUTHORITY_NAME);
   String authorityName = StringUtils.EMPTY;
  if (nodeService.getType(personRef).equals(ContentModel.TYPE_AUTHORITY_CONTAINER)){
    authorityName = (String) nodeService.getProperties(personRef).get(ContentModel.PROP_AUTHORITY_NAME);
  } else{
   authorityName = (String) nodeService.getProperties(personRef).get(ContentModel.PROP_USERNAME);
  }
   authorityService.addAuthority(parentGroupName, authorityName);
}

You would have to mainly use following repository services in your custom webscript for your task.

1- org.alfresco.service.cmr.repository.NodeService;
2- org.alfresco.service.cmr.security.AuthorityService;
3- org.alfresco.repo.security.authority.AuthorityDAO;
4- org.alfresco.service.cmr.security.PersonService;

To understand ACLs you can refer this document: https://docs.alfresco.com/5.2/concepts/secur-acl-example.html

Refer for roles and permissions here: https://docs.alfresco.com/5.2/references/permissions_share.html