CODEWITHSUNDEEP
alfrescoecm
nemelianov
nemelianov

Reputation: 909

Alfresco ECM mandatory access control?

Does Alfresco ECM has component, that allows to work not through role-based access control, but using mandatory access control (MAC)?

Upvotes: 0

Views: 122

Answers (2)

Heiko Robert
Heiko Robert

Reputation: 2737

No. Alfresco ECM has no out of the box support for any dynamic authority security concepts like RBAC, MAC which supports defining (business) rules on (business) objects. Alfresco calls roles what in real are permission bundles (group of permissions) to be attached to a content node.

To be fair: most general purpose dms systems don't support dynamic, configurable role concepts in the sense of RBAC and MAC but Alfresco has the low level support to implement this:

  • policies (similar to database triggers)
  • method level security (java voter methods which can be hooked in)

Take a look into Authorization And Access Control

We implemented this for special use cases (e.g. role based access for special document types or access rights based on associations to implement case mimik) but it may be a bigger job as expected to make this working transparent in Share and scalable over millions of documents.

Upvotes: 2

roy roy
roy roy

Reputation: 1

Alfresco ecm provide s role based access controls. There are some roles like as Contributor Collaborator Editor Consumer

According to these roles you can access contents in Alfresco repository. You can find more on Alfresco Documentation

Upvotes: 0

Related Questions