In this chapter, we learned how role-based security is managed for the Alfresco Records Management site. Alfresco has a very rich and very granular permission structure, making it possible to create custom roles that can match the needs of most organizations.

We covered the following topics in this chapter:

At the end of the chapter, in a "How does it work?" section, we looked in detail at how data webscripts are used to retrieve data from the Alfresco repository for users, groups, and roles. We also saw the definition of the permission model for Records Management and how the individual permissions are bundled into permissionGroups corresponding to the roles in Records Management.

In the next chapter, we will complete our discussion of Alfresco Records Management. In that last chapter, we'll discuss some additional areas of Records Management configuration. In particular, we will see how records and record containters of the Records Management content model can be extended using a tool within the Records Management console.