topic Re: Repository webscript permission problem. in Alfresco Archive

Repository webscript permission problem.

cfox — Wed, 25 Nov 2009 21:04:32 GMT

I am using the share proxy url to access many custom repository webscripts. However one reports back with "You do not have the appropriate permissions to perform this operation." What are the possible causes? Version Enterprise 3.1Craig Here is the error response:{ "status" : { "code" : 5

Re: Repository webscript permission problem.

mikeh — Wed, 02 Dec 2009 21:29:55 GMT

Looks like there's a node coming up in your webscript to which the executing user doesn't have permission to read the properties of.

Does it work if you go to the webscript directly (i.e. bypass the Share proxy)?

You can also wrap the problematic line of your webscript (line #59) ina try… catch block and logger.log() to determine which nodeRef is causing the problem. This might help track down why you're getting the Access Denied exception.

Thanks,
Mike

Re: Repository webscript permission problem.

cfox — Wed, 09 Dec 2009 14:52:32 GMT

I solved the issue.

My server is running Enterprise 3.1. I found that when my script accessed the property cm:homeFolder it caused a security violation. I dont need this information so I just eliminated it.

I also found on Community 3.2 this error does NOT occur. There is no security violation.

Re: Repository webscript permission problem.

mikeh — Thu, 10 Dec 2009 17:24:03 GMT

There have been some changes around accessing paths, etc. which means an administrator can remove the EVERYONE group from Data Dictionary for example and users would still be able to access scripts within by directly addressing them. It's possible a bug has crept in, so please raise a JIRA issue if you've got a reproducible case around that area.

Many thanks,
Mike