Hello,
I'm starting to use the openCMIS java api to access my alfresco repository and there is something that I don't understand about rights management.
the openCMIS api allows me to query and list the content of a private site even though the user specified for the session isn't a member of this site.
I also used the openCMIS workbench to test my repository and when I try to access to the private site and its content, I get a "permission denied" popup but if I click again on the site, I still can see its content and its properties.
Is there a way to prevent this behaviour? When I query for content using openCMIS, I would like to retrieve only the content for which the session user has read permission.
I'm using alfresco Community - 5.1.0 (r122274-b3) and openCMIS 0.13
Regards :)
edit: I restarted the server and the workbench and the queries and listing now returns the right elements.