topic Re: Access Denied in Alfresco Archive

Access Denied

thestorm — Mon, 19 Jan 2009 02:06:29 GMT

Dear people,I hope some1 could help me.I have a simple workflow that content that is submited by an employee to his folder is automatically moved to the space of his boss. when i want to upload sth i get access denied cause the employee of course cant see the folder of the boss. Is there a way to ch

Re: Access Denied

vinaxwater — Mon, 19 Jan 2009 03:17:38 GMT

Hi friend

You want move one file from a space to a space You must have to all permission in target space. In this case workflow allow "Add Resource" therefore i don't understand what mean is for this issuse?

Regards.

Re: Access Denied

thestorm — Mon, 19 Jan 2009 04:08:53 GMT

hi vinax

the employee has no permissions in the target folder, the workflow should move the file there and then there is a simple workflow for approve and reject for the boss.

The target folder shouldnt be readable for the employee only for the boss

Re: Access Denied

zaizi — Mon, 19 Jan 2009 04:53:31 GMT

This is what you are after: http://wiki.alfresco.com/wiki/WorkflowAdministration#Run_As

Re: Access Denied

thestorm — Mon, 19 Jan 2009 05:17:26 GMT

and how to add the out of the box feature move object to space and add simple workflow to the script space? (sorry im a java noob)

is it sth. like that script, i made a rule for content, execute a script, inbound and this script but its not movin

<action class="org.alfresco.repo.workflow.jbpm.AlfrescoJavaScript">
<runas>admin</runas>
<script>
var folder=userhome.childByNamePath("Company Home/Dantotec Intranet/Service/Eingereichte Dokumente/");

document.move(folder);
</script>
</action>

Re: Access Denied

zaizi — Mon, 19 Jan 2009 05:44:35 GMT

See http://forums.alfresco.com/en/viewtopic.php?f=36&t=12587&start=0&st=0&sk=t&sd=a for a previous discussion on this.

Re: Access Denied

thestorm — Mon, 19 Jan 2009 05:52:23 GMT

there is no scripted solution to the problem theres a write only group but i guess thats a bad solution. I cant see the mistake in my Java Script, maybe some1 can help

Re: Access Denied

zaizi — Mon, 19 Jan 2009 06:11:12 GMT

You can always create a "Drop Box" in the manager's home folder. With write permissions for all. As part of the work flow when the manager approves it, it is moved to a more secure area. This second copying can be run as the Manager.

Re: Access Denied

thestorm — Mon, 19 Jan 2009 06:17:30 GMT

I tought of this but if the users have write permissions they could trigger the move process theirselfe or am I wrong?

Re: Access Denied

zaizi — Mon, 19 Jan 2009 07:11:39 GMT

Folder A - employee folder
Folder B - manager drop box
Folder C - manager secure folder

Everyone can write to folder B. Set an inbound rule trigger that will start a work flow and assign it to the manager (or folder owner).

Manager approves the work flow, which copies it into folder C. Only the manager has write / read access to folder C.

There are better ways of doing this, but will require writing java / javascript code. The above should be configurable through the UI.

Re: Access Denied

sc_zix — Sat, 21 Mar 2009 08:16:47 GMT

I'm having the same problem here..
I'm also new to alfresco.
I haven't test the zaizi's last solution, though..

I'm guessing that: the rule of "apply to all" n "move to boss' folder" invoke this problem..
So, the permission to write in folder is re-directed to "boss' folder".
If this is right, maybe we can stop the script from checking the permission in the "move target" folder,
and only checking the folder where we upload the content.

regards,
Welly