Forums

Home » Liferay Portal » English » 3. Development

Combination View Flat View Tree View
Threads [ Previous | Next ]
toggle
Jelmer Kuperus
Per user permissions in liferay 6
May 24, 2010 2:58 PM
Answer

Jelmer Kuperus

Rank: Liferay Legend

Posts: 1192

Join Date: March 10, 2010

Recent Posts

Hi. We are using the document library portlet and need to be able to assign permissions on documents to specific users.

This was easy to do in liferay 5.2.x but liferay 6 uses the new rbac permission algorithm by default
This algorithm is described on

http://www.liferay.com/web/raymond.auge/blog/-/blogs/the-new-liferay-permission-algorithm-a-k-a-5-a-k-a-rbac

When using this algorithm I suppose we could create a role per user but that seems like somewhat of a hack.
Can someone comment on this ? Is this the way to go with this algorithm ?

Another option I thought of is to set the permissions.user.check.algorithm property in portal-ext.properties to 1 - 4 That way we'd be using the older, more flexible, but less performant permission based algorithm.
But is this still supported and will this still be supported in future versions ?
Jelmer Kuperus
RE: Per user permissions in liferay 6
May 25, 2010 2:53 AM
Answer

Jelmer Kuperus

Rank: Liferay Legend

Posts: 1192

Join Date: March 10, 2010

Recent Posts

shameless self bump
Pete J Johnson
RE: Per user permissions in liferay 6
May 9, 2012 8:45 AM
Answer

Pete J Johnson

Rank: New Member

Posts: 4

Join Date: January 8, 2009

Recent Posts

This is actually interesting for me also. Did you end changing the permissions.user.check.algorithm property? We also require access right control on documents per user.
Jelmer Kuperus
RE: Per user permissions in liferay 6
May 11, 2012 8:23 AM
Answer

Jelmer Kuperus

Rank: Liferay Legend

Posts: 1192

Join Date: March 10, 2010

Recent Posts

No, we did try it out, and it did exactly what we needed but because it's not the default anymore there where many bugs. Plus i've heard Liferay developers express the intent to want to remove this option from Liferay altogether which means you could end up stuck on on an old version of Liferay.

The "role per user" strategy works but it requires administrative access to create such a role. So its not like any user can give permissions to any other one user.

Also things don't work out all that well when you create lots of roles specific to one users. Permission dialogs where not created with that many roles in mind
Pete J Johnson
RE: Per user permissions in liferay 6
May 12, 2012 12:41 AM
Answer

Pete J Johnson

Rank: New Member

Posts: 4

Join Date: January 8, 2009

Recent Posts

Major setback. We also tried one of the old algorithms and experienced bugs like users could not be found. Granting access to a resource for some specific users is IMO a critical basic feature. I wonder if there's anything coming to solve this..
Mika Koivisto
RE: Per user permissions in liferay 6
May 15, 2012 12:42 PM
Answer

Mika Koivisto

LIFERAY STAFF

Rank: Liferay Legend

Posts: 1501

Join Date: August 7, 2006

Recent Posts

Algorithms 1 - 5 are dropped in Liferay 6.2 so don't rely on them.
Matthew Smith
RE: Per user permissions in liferay 6
June 12, 2012 1:16 PM
Answer

Matthew Smith

Rank: New Member

Posts: 3

Join Date: March 21, 2012

Recent Posts

Is there a document anywhere that details how to move from algorithm 5 to 6?
Vijay Patil
RE: Per user permissions in liferay 6
November 6, 2012 6:54 AM
Answer

Vijay Patil

Rank: New Member

Posts: 3

Join Date: August 14, 2012

Recent Posts

We are also looking at this. It is critical that we have the facility to share the document per user. Are there workarounds for this? If we are looking at customizing the document library to show the users list in the permissions and allow to select, do we need to look at ext development? Any pointers to achieve this would be appreciated.

Thanks
Vijay
Pietro Piccoli
RE: Per user permissions in liferay 6
August 7, 2013 5:44 AM
Answer

Pietro Piccoli

Rank: New Member

Posts: 8

Join Date: January 24, 2012

Recent Posts

Hi,
is there in Liferay roadmap the option of configure an action on resource (edit,view,delete.etc..) not only by role but also by user or user group?

And there will be a possibility to restrict access on a particular property of model (ex.: Name of organization in Organization Model ) so a user or a user with specific role can view or not view or modify or not modify that particular field "name of organization" though the user belong a role that allow editing the resource "organization" ?


Thanks in advance.