Permissions based on Property and Group

[Former Member]

Hello,

i want to change the permissions of a user (read, write, delete) for a resource during runtime, based on properties of the resource and group memberships of the user. Has anyone an idea how to achieve this.

Every user has the permission "Full Control" set for the repository of the folder

[Former Member]

Hi Macro,

I assume permissions are managed using aclSecurityManager (such as in /documents repository manager).

In this method, not every resource has an acl (access control list).

A resource that doesn't have an acl inherits its permissions from its father.

Therefore the way to remove permissions for a resource without an acl is to create an empty acl for it.

Here's an example code:

if (privateFlag){	
        IResourceAclManager aclMan = ((IAclSecurityManager) aResource.getRepositoryManager().getSecurityManager(aResource)).getAclManager();
	aclMan.createAcl(aResource);
}
else{
	IResourceAclManager aclMan = ((IAclSecurityManager) aResource.getRepositoryManager().getSecurityManager(aResource)).getAclManager();
	IResourceAcl acl = aclMan.createAcl(aResource);
	IUMPrincipal everyone = WPUMFactory.getGroupFactory().getGroup("Everyone");
	IAclPermission read = aclMan.getPermission(IAclPermission.ACL_PERMISSION_READ);
	IResourceAclEntry entry = aclMan.createAclEntry(everyone,false,read,0);
	acl.addEntry(entry);
}

Hope that helps,

Yoav.