Hi everyone,
We have an xCP 2.0 application that is called from our portal which pass a customer ID in the URL. xCP would then uses that customer ID to fetch a folder and put the user in context so that he sees only the documents of the specific customer.
Now we have another requirement where an extra parameter might be passed in the URL to filter down the context which the user is entitled to see in that given session. Our first reflex was of course to define an implicit filter to the search but this is quite intrusive and brings another problem which is that documents would be fully accessible from other interfaces such as webtop. The other mechanism we thought of would be to use dynamic groups.
With dynamic groups, the members are potential members and not given rights up front. My understanding is that to be considered a member; a DFC privileged client must add the user to the group once the IDfSession is open.
We have tried to implement such thing in xCP 2 but it doesn't seem to stick. It seems that sessions created and released on each UI interaction. So the dynamic group membership doesn’t last as long as the web session. I was wondering if there's any way around this. Could we intercept somehow the session creation and add the user to the dynamic group?
Thank you