Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-16043

Site Manager is able to delete/move/copy locked files


    • Bug Priority:
      Category 2
    • Hot Fix Version:
    • ACT Numbers:

      00633364 Premier


      Need svn tag and maven


      In a site if a user checks out a file (edit online, edit offline) the file becomes locked, however, if a manager navigates to the document library and locates the locked file the manager is able to delete/move/copy it by selecting the file and selecting "Selected items"

      [Steps to reproduce]

      • Install alfresco 5.1.0 using the installer
      • Start alfresco and login to share as the admin user
      • Create a user (userA)
      • Create a site (public moderated) (siteA)
      • Add userA to siteA as a manager
      • Navigate to siteA's document library and create a text file (file.txt)
      • After creation edit the file offline, this will lock the file
      • In another browser login to share as userA
      • Accept the site invite
      • Navigate to the siteA's document library
      • select file.txt and click the menu "Selected Items..."

      [Current behaviour]

      The actions copy/move/delte are exposed and one is able to delete/copy/move the locked file.

      [Expected behaviour]

      The actions copy/move/delete are not available to the manager

      [Analysis to date]

      The actions are only available from the "Selected Items..." menu, if you click on the document's details userA can only unlock the file, from a mouse over the file userA cannot see the delete/move/copy actions. As a workaround we have changed the actions via share-config-custom.xml

               <action type="action-link" id="onActionDownload" icon="document-download" label="menu.selected-items.download" />
               <action type="action-link" id="onActionCopyTo" icon="document-copy-to" label="menu.selected-items.copy" notAspect="cm:lockable"/>
               <action type="action-link" id="onActionMoveTo" icon="document-move-to" permission="Delete" label="menu.selected-items.move" notAspect="cm:lockable"/>
               <action type="action-link" id="onActionAssignWorkflow" asset="document" icon="document-assign-workflow" label="menu.selected-items.assign-workflow"/>
               <action type="action-link" id="onActionDelete" icon="document-delete" permission="Delete" label="menu.selected-items.delete" notAspect="hwf:hybridWorkflow,sys:undeletable,cm:lockable" />
               <action type="action-link" id="onActionCloudSync" asset="document" icon="document-cloud-sync"  permission="CreateChildren" label="menu.selected-items.cloudSync" notAspect="sync:syncSetMemberNode" syncMode="ON_PREMISE" />
               <action type="action-link" id="onActionCloudSyncRequest" icon="document-request-sync" label="menu.selected-items.cloudRequestSync" hasAspect="sync:syncSetMemberNode" syncMode="ON_PREMISE" />

      however because the customer will be upgrading to 5.1 soon it will be ideal to have this fixed out out the box. The customer also wants to make sure that the delete action is supposed to be checking for locked files in the repository side, right now we are able to delete locked files without any problems.


          Issue Links




                • Assignee:
                  closedissues Closed Issues
                  jportillo Jose Portillo
                • Votes:
                  0 Vote for this issue
                  11 Start watching this issue


                  • Created:

                    Time Tracking

                    Original Estimate - Not Specified
                    Not Specified
                    Remaining Estimate - 0 minutes
                    Time Spent - 3 days, 15 minutes
                    3d 15m

                      Structure Helper Panel