Using guestGroups and adminGroups properties - Alfresco Content Services - 23.4 - 23.4 - Ready - Alfresco - external

Alfresco Content Services
Platform
Alfresco
Product
Alfresco Content Services
Release
23.4
License

The authority-services-context.xml, bean id authorityService provides the property configuration of the Authority Service implementation. This configuration also allows the designation of specific groups with admin or guest permissions in the system.

By listing a group under the guestGroups property (case insensitive), the users in that group will only be allowed guest permission. Likewise, by listing a group under the adminGroups property (case insensitive), the users in that group will be provided admin permission.

For example, assume that you’re synchronizing users into Content Services and you specifically want to specify some groups as only guest users in the system. You would override the authority-services-context.xml file adding those groups to the guestGroups list (case insensitive). As a result, users in those groups will have authenticated logins but limited to guest authorization.

Configure guestGroups and adminGroups properties

Use this information to configure the guestGroups and adminGroups properties.

  1. Download the authority-services-context.xml file.
  2. Paste this file into the <extension> directory.
  3. Open the authority-services-context.xml file.
    1. To specify some groups as only guest users, add them to the guestGroups property list. 
       <!-- A list of groups with guest rights.   -->
 <!-*                                      -->
         <property name="guestGroups">
             <set>
             </set>
         </property>
    2. To assign admin rights to some groups, add them to the adminGroups property list. 
       <!-- A list of groups with admin rights.   -->
 <!-*                                      -->
         <property name="adminGroups">
             <set>
                 <value>ALFRESCO_ADMINISTRATORS</value>
             </set>
         </property>
  4. Save the file and then restart the server.