Daily Log for #alfresco IRC Channel

Alfresco discussion and collaboration. Stick around a few hours after asking a question.

Official support for Enterprise subscribers: support.alfresco.com.

Joining the Channel:

Join in the conversation by getting an IRC client and connecting to #alfresco at Freenode. Our you can use the IRC web chat.

More information about the channel is in the wiki.

Getting Help

More help is available in this list of resources.

Daily Log for #alfresco

2018-01-30 07:37:11 GMT <MorganP> Good morning everybody

2018-01-30 07:43:02 GMT <yreg> Morning

2018-01-30 07:52:17 GMT <bmejias> morning!

2018-01-30 08:26:33 GMT <DarkStar1> Morning everyone

2018-01-30 08:31:29 GMT <twen> good morning

2018-01-30 08:32:33 GMT <twen> hello prince DarkStar1

2018-01-30 08:56:41 GMT <bhagyas> Good morning all :)

2018-01-30 09:16:51 GMT <jri> Hi there! Is there a way to export permissions of a store in a file (excell, csv, etc.)? to permit to managers to check it without give them Admin rights

2018-01-30 09:19:39 GMT <angelborroy> jri not by default

2018-01-30 09:19:56 GMT <angelborroy> jri you can build such a file with JavaScript API, Java API, CMIS, REST API...

2018-01-30 09:21:02 GMT <jri> Thx angelborroy!

2018-01-30 09:21:17 GMT <jri> I think I can made a script then

2018-01-30 09:21:37 GMT <angelborroy> yep

2018-01-30 09:21:58 GMT <angelborroy> probably CMIS is the better approach

2018-01-30 09:22:11 GMT <yreg> jri, we have in care4alf an export script that exports metdata and/or permissions either to the repository or to filedownload upon admin request

2018-01-30 09:22:30 GMT <yreg> the resulting file is a csv file

2018-01-30 09:23:00 GMT <jri> ah cool

2018-01-30 09:23:07 GMT <jri> is it free/open source ?

2018-01-30 09:23:28 GMT <yreg> that it is https://bitbucket.org/xenit/care4alf

2018-01-30 09:23:29 GMT <alfbot> Title: xenit / care4alf — Bitbucket (at bitbucket.org)

2018-01-30 09:23:47 GMT <yreg> but it requires dynamic-extensions to be on board for it to work

2018-01-30 09:23:51 GMT <angelborroy> but it’s using dynamic..

2018-01-30 09:23:52 GMT <angelborroy> that was

2018-01-30 09:23:53 GMT <angelborroy> :D

2018-01-30 09:24:10 GMT <yreg> https://github.com/xenit-eu/example-dynamic-extension

2018-01-30 09:24:11 GMT <alfbot> Title: GitHub - xenit-eu/example-dynamic-extension: Example Dynamic Extension for Alfresco. (at github.com)

2018-01-30 09:24:45 GMT <yreg> both opensource

2018-01-30 09:24:55 GMT <yreg> and available from maven central

2018-01-30 09:25:07 GMT <angelborroy> seriously, yreg, that dynamic extension is not a good approach to share source code

2018-01-30 09:25:52 GMT <yreg> even though I think I haven't pushed the latest care4alf yet, that's scheduled for end of the month

2018-01-30 09:26:01 GMT <yreg> angelborroy, why not ?

2018-01-30 09:26:27 GMT <angelborroy> anything out of the standard makes your code less "understandable"

2018-01-30 09:26:51 GMT <angelborroy> In fact, I’m not using care4alf because of this

2018-01-30 09:27:06 GMT <yreg> angelborroy, do you have real concerns about it ?

2018-01-30 09:27:21 GMT <yreg> have you tried understanding code and was not able to do so ?

2018-01-30 09:27:25 GMT <angelborroy> no

2018-01-30 09:27:44 GMT <angelborroy> but I have enough work trying to understand Alfresco just to learn something new from a partner

2018-01-30 09:27:46 GMT <yreg> do you have any concrete evidence that it is absolute evil and people need to avoid it ?

2018-01-30 09:27:54 GMT <angelborroy> it’s not evil

2018-01-30 09:28:20 GMT <angelborroy> for me it’s simply easier to work with standard (Alfresco supported) technologies

2018-01-30 09:28:36 GMT <yreg> It's actually way easier than the Alfresco-by-the-books way to do stuff

2018-01-30 09:29:05 GMT <angelborroy> Probably, but it requires some time to invest

2018-01-30 09:29:15 GMT <angelborroy> and also some time to teach to my customers

2018-01-30 09:29:18 GMT <yreg> the only downside of it I see is that it makes life easier for junior developers, making it harder to go acquire enough knowledge to get certified

2018-01-30 09:29:45 GMT <yreg> angelborroy, the API is totally the same

2018-01-30 09:29:55 GMT <angelborroy> I don’t know, I tell you

2018-01-30 09:30:01 GMT <angelborroy> I’ve ever looked at that :D

2018-01-30 09:30:35 GMT <yreg> it just adds few annotations to make coding experience go faster (shortcuts to having tons of config files)

2018-01-30 09:30:48 GMT <yreg> plus it does provide classpath isolation

2018-01-30 09:31:02 GMT <angelborroy> I’m not saying it’s bad

2018-01-30 09:31:22 GMT <angelborroy> for instance

2018-01-30 09:31:29 GMT <yreg> so you could technically have two extensions on the same instance using libraries from different versions without issues

2018-01-30 09:31:31 GMT <angelborroy> if I use Alfred, I’ll have to learn dynamic

2018-01-30 09:31:50 GMT <angelborroy> because it’s a great product and it add great value to Alfresco

2018-01-30 09:32:04 GMT <yreg> https://github.com/xenit-eu/dynamic-extensions-for-alfresco/wiki

2018-01-30 09:32:05 GMT <alfbot> Title: Home · xenit-eu/dynamic-extensions-for-alfresco Wiki · GitHub (at github.com)

2018-01-30 09:32:08 GMT <angelborroy> But it does not worth to me for Care4Alf or so

2018-01-30 09:32:21 GMT <yreg> You can start here if you like to get along with dynamic extensions

2018-01-30 09:32:52 GMT <yreg> https://github.com/xenit-eu/dynamic-extensions-for-alfresco/wiki/Annotated-WebScripts

2018-01-30 09:32:53 GMT <alfbot> Title: Annotated WebScripts · xenit-eu/dynamic-extensions-for-alfresco Wiki · GitHub (at github.com)

2018-01-30 09:32:58 GMT <yreg> as an example doc page

2018-01-30 09:33:23 GMT <angelborroy> yep

2018-01-30 09:33:36 GMT <angelborroy> and the day an exception arise, I’ll have to dig in the code

2018-01-30 09:33:40 GMT <angelborroy> no, thanks

2018-01-30 09:33:54 GMT <yreg> if you have enhancement requests or feedback, we are always open to new idea

2018-01-30 09:33:55 GMT <angelborroy> Just only when the value will be greater than the risk

2018-01-30 09:34:21 GMT <angelborroy> shhh, yreg, AFaust is here!

2018-01-30 09:34:35 GMT <AFaust> ~flushlog

2018-01-30 09:34:35 GMT <alfbot> AFaust: Woooosh, your log has been flushed...

2018-01-30 09:34:41 GMT <yreg> hehe

2018-01-30 09:34:50 GMT <angelborroy> Damn it, he is an AlfLog master!

2018-01-30 09:35:08 GMT * yreg is going to get hammered by AFaust now for lobbying for dynamic-extension

2018-01-30 09:39:27 GMT <AFaust> yreg: Why do you expect that? You know my general opinion on that, and I think I have my opinion on configuration by annotation known here too. To keep on bitching about it would not be productive...

2018-01-30 09:41:34 GMT <AFaust> But I will just mention that I personally agree with the first reaction of angelborroy

2018-01-30 09:42:32 GMT <AFaust> And as the initiator of ootbee-support-tools, I am of course more interested to see that expanded to cover use cases without the heavy-handed dynamic extension as a dependency...

2018-01-30 09:45:03 GMT <angelborroy> +1

2018-01-30 09:48:31 GMT <AFaust> yreg: Any progress / discussions on my suggestions from last year to have a build-time process convert a dynamic-extensions developed addon converted into a regular Alfresco addon? We were discussing how dynamic-extensions may be great for quick development (which I am willing to concede), but once in production some/most of its features are rarely used - so we were wondering (me in a discussions with Toons) if there could be a build step to generate the

2018-01-30 09:48:31 GMT <AFaust> boilerplate that the annotations provide and produce a regular AMP/JAR addon without the runtime dependency...

2018-01-30 09:56:41 GMT <yreg> AFaust, we already had that more than a year ago (dynamic-extensions ampifier) but that never got to a mature enough state to be released)

2018-01-30 09:57:38 GMT <yreg> it did cover a fair share of the dynamic extensions features : generating all the config files for webscripts for instance, the xml context ...

2018-01-30 09:58:39 GMT <yreg> but that effort stopped at the stage of prototype because AFAIK we do not have real need for it

2018-01-30 09:59:16 GMT <yreg> and our clients find it nice to be able to upgrade extensions at runtime without having downtime (talking maiinly about not clustered setup)

2018-01-30 10:24:31 GMT <MorganP> Anybody knows if there is a patch somewhere for https://issues.alfresco.com/jira/browse/ALF-21808?

2018-01-30 10:25:39 GMT <yreg> MorganP, kevin said that the fix should appear starting from r136993

2018-01-30 10:25:40 GMT <AFaust> Hmm - I thought that it works with the most recent Firefox versions...

2018-01-30 10:25:51 GMT <yreg> not sure if you can search for that in share history

2018-01-30 10:25:54 GMT <AFaust> ...and latest 5.2 GA

2018-01-30 10:26:55 GMT <yreg> MorganP, https://github.com/Alfresco/share/commit/ba0add2e149bd18880bb94d84a18a2bda1e49ed6

2018-01-30 10:26:56 GMT <alfbot> Title: ALF-21808 - Unable to drag&drop upload multiple files in Firefox · Alfresco/share@ba0add2 · GitHub (at github.com)

2018-01-30 10:29:59 GMT <MorganP> Some customers have 201704 so it's not in there

2018-01-30 10:36:28 GMT <MorganP> Thx for the link yreg I will check this

2018-01-30 10:38:20 GMT <MorganP> I was searching for r136993 but I never found it

2018-01-30 10:40:36 GMT <yreg> I used the ticket number

2018-01-30 10:40:53 GMT <yreg> the revision number is probably only available from SVN

2018-01-30 10:41:12 GMT <yreg> and SVN rev ids were not added to the share export it seem

2018-01-30 10:41:14 GMT <yreg> s

2018-01-30 10:58:52 GMT <bmejias> hi all... I know yreg is attending FOSDEM

2018-01-30 10:59:00 GMT <bmejias> me too.... anyone else?

2018-01-30 14:16:54 GMT <jri__> Hello again...

2018-01-30 14:17:30 GMT <jri__> Someone can explain me what ALLOWED or DENIED means in the return of getPermission: http://docs.alfresco.com/5.2/references/API-JS-getPermissions.html ?

2018-01-30 14:17:31 GMT <alfbot> Title: getPermissions | Alfresco Documentation (at docs.alfresco.com)

2018-01-30 14:18:10 GMT <angelborroy> In Alfresco you can use ANY ALLOW ALLOWS or ANY DENY DENIES

2018-01-30 14:18:15 GMT <angelborroy> por defecto es ANY DENY DENIES

2018-01-30 14:18:34 GMT <angelborroy> sorry, by default is ANY DENY DENIES

2018-01-30 14:18:40 GMT <angelborroy> (I switched to Spanish :))

2018-01-30 14:19:00 GMT <angelborroy> So if there is a DENIED in the node, no other permission is applied

2018-01-30 14:19:27 GMT <angelborroy> jri__ does it make sense to you?

2018-01-30 14:20:40 GMT <jri__> It's like a default behavior ? (like in firewalls rules ? )

2018-01-30 14:20:46 GMT <angelborroy> right

2018-01-30 14:20:49 GMT <jri__> ok

2018-01-30 14:21:19 GMT <angelborroy> jri__ https://docs.alfresco.com/community/concepts/secur-acl-ordereval.html

2018-01-30 14:21:20 GMT <alfbot> Title: ACL ordering and evaluation | Alfresco Documentation (at docs.alfresco.com)

2018-01-30 14:21:50 GMT <jri__> Ah thanks! That's the link I needed

2018-01-30 14:35:56 GMT <yreg> jri__, if you don't have any magic sauce around permissions and ACLs, alfresco doesn't make use of DENIED ACLs by default

2018-01-30 14:36:08 GMT <yreg> and doesn't even expose them in share

2018-01-30 14:38:53 GMT <yreg> jri__, if you are looking for some inspiration for your own permission export script, feel free to get some from here : https://bitbucket.org/xenit/care4alf/src/17ba777425237f486eae670385c9f606565fbc31/src/main/java/eu/xenit/care4alf/export/Export.java?at=development&fileviewer=file-view-default#Export.java-203

2018-01-30 14:38:53 GMT <jri__> I've my configuration by default on this point

2018-01-30 14:38:54 GMT <alfbot> Title: xenit / care4alf / source / src / main / java / eu / xenit / care4alf / export / Export.java — Bitbucket (at bitbucket.org)

2018-01-30 14:39:10 GMT <Loftux> Got a request from customer that wants to prevent error messages that contains to much information to be sent to the share client. Such as the file path in the file failing. Is there an easy way in Surf to just turn off that for example for error 500.

2018-01-30 14:39:18 GMT <jri__> wow thanks!

2018-01-30 14:41:48 GMT <angelborroy> Loftux I remember that there was some JS to control that on Share

2018-01-30 14:42:02 GMT <angelborroy> Loftux But I can’t find it now… let me see

2018-01-30 14:42:40 GMT <yreg> jri__, note that by default in our extension we do not show the access status, but we provide a configuration entry to include that in the export : https://bitbucket.org/xenit/care4alf/src/17ba777425237f486eae670385c9f606565fbc31/src/main/java/eu/xenit/care4alf/export/Export.java?at=development&fileviewer=file-view-default#Export.java-85

2018-01-30 14:42:41 GMT <alfbot> Title: xenit / care4alf / source / src / main / java / eu / xenit / care4alf / export / Export.java — Bitbucket (at bitbucket.org)

2018-01-30 14:43:34 GMT <yreg> Loftux, I Ithought you could customiize error pages per webscript otherwise you fall back to a generic one

2018-01-30 14:43:47 GMT <yreg> and I think the generic one is done in jspo

2018-01-30 14:43:50 GMT <yreg> jsp**

2018-01-30 14:44:35 GMT <yreg> Loftux, https://github.com/Alfresco/share/blob/develop/share/src/main/webapp/error500.jsp if I am not mistaken

2018-01-30 14:44:36 GMT <alfbot> Title: share/error500.jsp at develop · Alfresco/share · GitHub (at github.com)

2018-01-30 14:44:55 GMT <angelborroy> yreg that is an error page, not the popup

2018-01-30 14:46:17 GMT <yreg> angelborroy, didn't see the part where he was talking about popups

2018-01-30 14:46:33 GMT <Loftux> yreg: In this case it is for /share/proxy/alfresco/api/people/pelo01/sites?roles=user&size=z where user pelo01 exist, but since size is NaN it fails error 500

2018-01-30 14:46:45 GMT <yreg> I don't think I understand the question well then

2018-01-30 14:47:53 GMT <angelborroy> anyway, I remember now that this was controlled in repo part

2018-01-30 14:50:37 GMT <angelborroy> yreg I guess Loftux is referring to things like this one: https://github.com/keensoft/alfresco-myfiles-quota/issues/1

2018-01-30 14:50:38 GMT <alfbot> Title: User interface error message · Issue #1 · keensoft/alfresco-myfiles-quota · GitHub (at github.com)

2018-01-30 14:51:22 GMT <Loftux> yreg: You are on track :) just gave an example to trigger an error that displays errors. Apparently information returned give away stuff that an attacher can use, such as file paths. Not an actual security hole (if so would not write here).

2018-01-30 14:52:08 GMT <Loftux> attacker

2018-01-30 14:56:05 GMT <yreg> Loftux, can you share a paste with an example output

2018-01-30 14:56:07 GMT <yreg> ?

2018-01-30 15:00:07 GMT <Loftux> yreg: https://pastebin.com/WEGmgnCh

2018-01-30 15:00:08 GMT <alfbot> Title: [JSON] Example error - Pastebin.com (at pastebin.com)

2018-01-30 15:03:16 GMT <Loftux> [NOLOG] It was a request from external security audit, feels like they had to put something in their report, in my mind this seems harmless.

2018-01-30 15:20:38 GMT <yreg> Loftux, that's something that should come from <webscript>.<method>.status.ftl

2018-01-30 15:21:03 GMT <yreg> if not, it should default to https://github.com/Alfresco/surf/blob/master/surf/spring-surf/spring-surf/src/main/resources/surf/webscripts/json.status.ftl

2018-01-30 15:21:04 GMT <alfbot> Title: surf/json.status.ftl at master · Alfresco/surf · GitHub (at github.com)

2018-01-30 15:22:41 GMT <yreg> Loftux, I suppose that it is possible to override that only include the status

2018-01-30 15:22:47 GMT <yreg> but it can be quite tricky

2018-01-30 15:23:12 GMT <Loftux> yreg: Excellent, I'll look into this. Thanks.

2018-01-30 15:23:18 GMT <yreg> I mean to figure out the right path

2018-01-30 15:24:07 GMT <yreg> s/only/to only/

2018-01-30 15:25:37 GMT <Loftux> yreg: Like it's always been with surf, you think you have the file in the correct path, but no it doesn't get picked up. You move it around, until you end up in the start location, and it suddenly works. :p

2018-01-30 15:29:53 GMT <yreg> Loftux, I hope how wcmquickstart is oferriding the html status does give you good input on where you should put yours ;-) https://github.com/Alfresco/share/tree/develop/wcmquickstart-module/wcmquickstartwebsite/src/main/webapp/WEB-INF/webscripts

2018-01-30 15:29:54 GMT <alfbot> Title: share/wcmquickstart-module/wcmquickstartwebsite/src/main/webapp/WEB-INF/webscripts at develop · Alfresco/share · GitHub (at github.com)

2018-01-30 15:31:43 GMT <Loftux> yreg: Excellent ^2 !

2018-01-30 15:32:09 GMT <yreg> s/oferriding/overriding/

2018-01-30 15:32:34 GMT <yreg> I am doing a lot of typos today, it seems it's about time to head back home and get some rest

End of Daily Log

The other logs are at http://esplins.org/hash_alfresco