Per user permissions in liferay 6

[jelmer kuperus, modificado hace 13 años.]

Hi. We are using the document library portlet and need to be able to assign permissions on documents to specific users.

This was easy to do in liferay 5.2.x but liferay 6 uses the new rbac permission algorithm by default
This algorithm is described on

http://www.liferay.com/web/raymond.auge/blog/-/blogs/the-new-liferay-permission-algorithm-a-k-a-5-a-k-a-rbac

When using this algorithm I suppose we could create a role per user but that seems like somewhat of a hack.
Can someone comment on this ? Is this the way to go with this algorithm ?

Another option I thought of is to set the permissions.user.check.algorithm property in portal-ext.properties to 1 - 4 That way we'd be using the older, more flexible, but less performant permission based algorithm.
But is this still supported and will this still be supported in future versions ?

[jelmer kuperus, modificado hace 13 años.]

shameless self bump

[Pete J Johnson, modificado hace 11 años.]

This is actually interesting for me also. Did you end changing the permissions.user.check.algorithm property? We also require access right control on documents per user.

[jelmer kuperus, modificado hace 11 años.]

No, we did try it out, and it did exactly what we needed but because it's not the default anymore there where many bugs. Plus i've heard Liferay developers express the intent to want to remove this option from Liferay altogether which means you could end up stuck on on an old version of Liferay.

The "role per user" strategy works but it requires administrative access to create such a role. So its not like any user can give permissions to any other one user.

Also things don't work out all that well when you create lots of roles specific to one users. Permission dialogs where not created with that many roles in mind

[Pete J Johnson, modificado hace 11 años.]

Major setback. We also tried one of the old algorithms and experienced bugs like users could not be found. Granting access to a resource for some specific users is IMO a critical basic feature. I wonder if there's anything coming to solve this..

[Vijay Patil, modificado hace 11 años.]

We are also looking at this. It is critical that we have the facility to share the document per user. Are there workarounds for this? If we are looking at customizing the document library to show the users list in the permissions and allow to select, do we need to look at ext development? Any pointers to achieve this would be appreciated.

Thanks
Vijay

[Pietro Piccoli, modificado hace 10 años.]

Hi,
is there in Liferay roadmap the option of configure an action on resource (edit,view,delete.etc..) not only by role but also by user or user group?

And there will be a possibility to restrict access on a particular property of model (ex.: Name of organization in Organization Model ) so a user or a user with specific role can view or not view or modify or not modify that particular field "name of organization" though the user belong a role that allow editing the resource "organization" ?


Thanks in advance.

[Mika Koivisto, modificado hace 11 años.]

Algorithms 1 - 5 are dropped in Liferay 6.2 so don't rely on them.

[Matthew Smith, modificado hace 11 años.]

Is there a document anywhere that details how to move from algorithm 5 to 6?

[Marco Rosetti, modificado hace 9 años.]

Any news about the right approach?

Is "one specific role per user" the only feasible way?