From f9a5191c6bcf7fd1e26d3656eef9edb7adce5ed9 Mon Sep 17 00:00:00 2001
From: Derek Hulley <derek.hulley@alfresco.com>
Date: Tue, 2 Jan 2007 15:04:39 +0000
Subject: [PATCH] Security settings for new removeChildAssociation method on
 NodeService & modified removeChild permissions

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@4707 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
---
 config/alfresco/public-services-security-context.xml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/config/alfresco/public-services-security-context.xml b/config/alfresco/public-services-security-context.xml
index 8bf50fbdf2..47ab1762b5 100644
--- a/config/alfresco/public-services-security-context.xml
+++ b/config/alfresco/public-services-security-context.xml
@@ -291,7 +291,9 @@
     <!-- addChild                                                                        -->
     <!--      requires create children on the parent                                     --> 
     <!-- removeChild                                                                     -->
-    <!--      Requires delete permission for the node to be deleted                      -->   
+    <!--      Requires delete children from the parent and delete for the child          -->
+    <!-- removeChildAssociation                                                          -->
+    <!--      Requires delete children from the parent and delete for the child          -->
     <!-- getProperties                                                                   -->
     <!--      Requires read properties for the node                                      -->
     <!-- getProperty                                                                     -->
@@ -345,7 +347,8 @@
                org.alfresco.service.cmr.repository.NodeService.getAspects=ACL_NODE.0.sys:base.ReadProperties
                org.alfresco.service.cmr.repository.NodeService.deleteNode=ACL_NODE.0.sys:base.DeleteNode
                org.alfresco.service.cmr.repository.NodeService.addChild=ACL_NODE.0.sys:base.CreateChildren,ACL_NODE.1.sys:base.ReadProperties
-               org.alfresco.service.cmr.repository.NodeService.removeChild=ACL_NODE.1.sys:base.DeleteChildren
+               org.alfresco.service.cmr.repository.NodeService.removeChild=ACL_NODE.0.sys:base.DeleteChildren,ACL_NODE.1.sys:base.DeleteNode
+               org.alfresco.service.cmr.repository.NodeService.removeChildAssociation=ACL_PARENT.0.sys:base.DeleteChildren,ACL_NODE.0.sys:base.DeleteNode
                org.alfresco.service.cmr.repository.NodeService.getProperties=ACL_NODE.0.sys:base.ReadProperties
                org.alfresco.service.cmr.repository.NodeService.getProperty=ACL_NODE.0.sys:base.ReadProperties
                org.alfresco.service.cmr.repository.NodeService.setProperties=ACL_NODE.0.sys:base.WriteProperties