Role names

[kubosj]

Hi all,

I freshly installed OpenKM Community from http://integration.openkm.com/6.2/ (Last build: April 10 2013 00:03:17). I use this version because of http://forum.openkm.com/viewtopic.php?f ... 49&p=22406

OS is CentOS 6. Then I connected it to LDAP, following http://wiki.openkm.com/index.php/Ldap-example1 Everything works, I can log in, I can see my LDAP roles and users. All users have correctly assigned roles. According to "Administration->Users".

Now I tried to create folder and assign role to it. If I assign ROLE_USER or ROLE_OPENKM it works as expected. If another role is used (like "linuxfile") it does not work. So users with this role cannot access this directory. I expect that there is some rule like:

• role must have "ROLE_" prefix
• role name must be upper case

Can anyone confirm this?

My use case is replacing SAMBA share controlled via LDAP directory. So LDAP is already filled by accounts/roles and it would great if I could use it in OpenKM.

Any help will be greatly appreciated!

[dejanfc]

You can use custom roles, but you have to use prefix="" in your auth manager and set read privileges for the new user role on every repository node (including trash).

[kubosj]

Thank you for answer dejanfc! The problem was a bit different but you pointed me in right direction. I already had in my OpenKM.xml:

Code: Select all

<beans:property name="rolePrefix" value="" />

but also:

Code: Select all

 <beans:property name="convertToUpperCase" value="true" />

...changing this to "false" fixed my issue.