RM-635: A records admin can assign the "Request Record Information" capability to a RM role.

* available by default on admin, power user, security officer and records manager
  * patch included



git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/modules/recordsmanagement/HEAD@48242 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Roy Wetherall
2013-03-18 04:56:51 +00:00
parent 2b841abaf8
commit 0b8277448a
4 changed files with 36 additions and 6 deletions

View File

@@ -294,4 +294,19 @@
</property>
</bean>
<!-- Request record information capability -->
<bean id="rmRequestRecordInformationCapability"
parent="declarativeCapability">
<property name="name" value="RequestRecordInformation"/>
<property name="permission" value="RequestRecordInformation"/> <!-- Associated permission (this is assignable) -->
<property name="kind" value="RECORD" /> <!-- Only applies to records -->
<property name="conditions">
<map>
<entry key="capabilityCondition.filling" value="true"/> <!-- Must have read and file permissions -->
<entry key="capabilityCondition.frozen" value="false"/> <!-- Not for frozen records -->
<entry key="capabilityCondition.declared" value="false"/> <!-- Only for undeclared records -->
</map>
</property>
</bean>
</beans>

View File

@@ -82,6 +82,7 @@
<!-- Since V2.1 -->
<includePermissionGroup type="rma:filePlanComponent" permissionGroup="CreateRecords"/>
<includePermissionGroup type="rma:filePlanComponent" permissionGroup="ManageRules"/>
<includePermissionGroup type="rma:filePlanComponent" permissionGroup="RequestRecordInformation"/>
</permissionGroup>
<permissionGroup name="Filing" allowFullControl="false" expose="true">
@@ -156,6 +157,7 @@
<permissionGroup name="CreateRecords" expose="false" allowFullControl="false"/>
<permissionGroup name="ManageRules" expose="false" allowFullControl="false"/>
<permissionGroup name="RequestRecordInformation" expose="false" allowFullControl="false"/>
<!-- End -->
@@ -409,6 +411,10 @@
<grantedToGroup permissionGroup="ManageRules"/>
</permission>
<permission name="_RequestRecordInformation" expose="false">
<grantedToGroup permissionGroup="RequestRecordInformation"/>
</permission>
</permissionSet>
</permissions>

View File

@@ -26,7 +26,8 @@
"DeclareRecordsInClosedFolders",
"ReOpenFolders",
"CycleVitalRecords",
"PlanningReviewCycles"
"PlanningReviewCycles",
"RequestRecordInformation"
]
},
{
@@ -50,7 +51,8 @@
"UpdateClassificationDates",
"CreateModifyDestroyClassificationGuides",
"UpgradeDowngradeAndDeclassifyRecords",
"UpdateExemptionCategories"
"UpdateExemptionCategories",
"RequestRecordInformation"
]
},
{
@@ -116,8 +118,8 @@
"CreateModifyDestroyClassificationGuides",
"UpgradeDowngradeAndDeclassifyRecords",
"UpdateExemptionCategories",
"MapClassificationGuideMetadata"
"MapClassificationGuideMetadata",
"RequestRecordInformation"
]
},
{
@@ -185,7 +187,8 @@
"UpdateExemptionCategories",
"MapClassificationGuideMetadata",
"ManageAccessControls",
"ManageRules"
"ManageRules",
"RequestRecordInformation"
]
}
]

View File

@@ -115,6 +115,12 @@ public class RMv21CapabilityPatch extends AbstractModuleComponent
addCapability(filePlan,
"ManageRules",
FilePlanRoleService.ROLE_ADMIN);
addCapability(filePlan,
"RequestRecordInformation",
FilePlanRoleService.ROLE_ADMIN,
FilePlanRoleService.ROLE_POWER_USER,
FilePlanRoleService.ROLE_RECORDS_MANAGER,
FilePlanRoleService.ROLE_SECURITY_OFFICER);
}