topic Re: Access Denied in Alfresco Archive

Access Denied

chicco0386 — Mon, 11 May 2009 09:53:45 GMT

Hi,I've this schema:3 usersincoCiccioGigi1 group with 3 sub-groups:AZIENDA:–>Redattori (User: Pinco)–>Verificatori (User: Ciccio)–>Approvatori (User: Gigi)SPACES:AZIENDA (Spaces Users: AZIENDA Coordinator)–>Workflow (Spaces Users: Inherit Parent Space Permissions)–>–>In redazion

Re: Access Denied

jayjayecl — Mon, 11 May 2009 13:08:10 GMT

Pinco needs WriteChildren permission in folder "Da verificare" , in order to let this document to be moved into this very space.
You did not tell whether the following spaces does inherit parent space permissions :

–>–>In redazione (Spaces Users: Redattori Collaborator)
–>–>Da verificare (Spaces Users: Verificatori Collaborator)

Re: Access Denied

chicco0386 — Mon, 11 May 2009 13:24:16 GMT

Pinco needs WriteChildren permission in folder "Da verificare" , in order to let this document to be moved into this very space.
You did not tell whether the following spaces does inherit parent space permissions :

–>–>In redazione (Spaces Users: Redattori Collaborator)
–>–>Da verificare (Spaces Users: Verificatori Collaborator)

Thanks for the quickly response…
But I don't understand how I can set the WriteChildren permission in folder "Da verificare" ?

PLEASE HELP ME
THANKS

Re: Access Denied

chicco0386 — Mon, 11 May 2009 14:03:40 GMT

I've SOLVED the problem:

1) "In redazione" –> User: Redattore –> Collaborator
2) "Da verificare" –> User: Redattore –> Contributor

So I can have the Write permission on the space "Da verificare"…

OK…

But with the Contributor permission into "Da verificare", the Redattore user can add contents…and I don't want this…

HOW CAN I DO?
I have to edit some XML configuration file?

Re: Access Denied

viralshah — Thu, 11 Mar 2010 10:04:24 GMT

We are facing the same issue, not able to understand why the user needs coordinator role in the space where the content is to be moved after he has approved from his space. Should not the system be actually moving the content to next space based on workflow ?

By making the user a coordinator in next space, the security is compromized as he can now add content to the space, where as his job was to just review content created by others and pass it on for approval.

Re: Access Denied

jayjayecl — Fri, 12 Mar 2010 10:20:07 GMT

The fact is that the action of moving the document will be called with the permission context of the user of the workflow.
In order to change that, you'll have to fork the workflow in order to call for "authenticationComponent.setSystemUserAsCurrentUser()" to be able to do the action… and then clear the securityContext