topic Lost permissions in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/lost-permissions/m-p/256326#M209456 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><BR /><SPAN>Following a migration from community 3.4.c to 3.4.d, I have a permissions problem concerning a few of my users.</SPAN><BR /><SPAN>In one case, I have a user with manager permissions who cannot upload or change meta data anymore.</SPAN><BR /><SPAN>The log is as follows:</SPAN><BR /><PRE class="language-none line-numbers"><CODE>12:06:13,914&nbsp; ERROR [extensions.webscripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 06120003 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnUpdatePropertiesPolicy.onUpdateProperties(org.alfresco.service.cmr.repository.NodeRef,java.util.Map,java.util.Map) in transaction a42b8713-5a18-4b6e-83a0-2ccdb5cc6bb9<BR />org.alfresco.error.AlfrescoRuntimeException: 06120003 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnUpdatePropertiesPolicy.onUpdateProperties(org.alfresco.service.cmr.repository.NodeRef,java.util.Map,java.util.Map) in transaction a42b8713-5a18-4b6e-83a0-2ccdb5cc6bb9<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:195)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.policy.TransactionBehaviourQueue.beforeCommit(TransactionBehaviourQueue.java:127)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.AlfrescoTransactionSupport$TransactionSynchronizationImpl.doBeforeCommit(AlfrescoTransactionSupport.java:732)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.AlfrescoTransactionSupport$TransactionSynchronizationImpl.doBeforeCommit(AlfrescoTransactionSupport.java:712)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.AlfrescoTransactionSupport$TransactionSynchronizationImpl.beforeCommit(AlfrescoTransactionSupport.java:672)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.TransactionSynchronizationUtils.triggerBeforeCommit(TransactionSynchronizationUtils.java:95)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.AbstractPlatformTransactionManager.triggerBeforeCommit(AbstractPlatformTransactionManager.java:927)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:737)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:723)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:394)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.util.transaction.SpringAwareUserTransaction.commit(SpringAwareUserTransaction.java:472)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:403)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:436)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:466)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:304)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:333)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:189)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:118)<BR />&nbsp;&nbsp;&nbsp;at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:58)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)<BR />&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)<BR />&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)<BR />&nbsp;&nbsp;&nbsp;at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)<BR />&nbsp;&nbsp;&nbsp;at java.lang.Thread.run(Thread.java:662)<BR />Caused by: org.alfresco.repo.security.permissions.AccessDeniedException: 06120002 Access Denied.&nbsp; You do not have the appropriate permissions to perform this operation.<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:48)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:160)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.proceedWithAudit(AuditMethodInterceptor.java:217)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:184)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)<BR />&nbsp;&nbsp;&nbsp;at $Proxy7.getChildAssocs(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rendition.RenditionDefinitionPersisterImpl.findActionNode(RenditionDefinitionPersisterImpl.java:163)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rendition.RenditionDefinitionPersisterImpl.loadRenditionDefinition(RenditionDefinitionPersisterImpl.java:123)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rendition.RenditionServiceImpl.loadRenditionDefinition(RenditionServiceImpl.java:257)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<BR />&nbsp;&nbsp;&nbsp;at java.lang.reflect.Method.invoke(Method.java:597)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.AlwaysProceedMethodInterceptor.invoke(AlwaysProceedMethodInterceptor.java:34)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:167)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)<BR />&nbsp;&nbsp;&nbsp;at $Proxy114.loadRenditionDefinition(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rendition.RenditionedAspect.onUpdateProperties(RenditionedAspect.java:152)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<BR />&nbsp;&nbsp;&nbsp;at java.lang.reflect.Method.invoke(Method.java:597)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.policy.JavaBehaviour$JavaMethodInvocationHandler.invoke(JavaBehaviour.java:173)<BR />&nbsp;&nbsp;&nbsp;at $Proxy11.onUpdateProperties(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.GeneratedMethodAccessor438.invoke(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<BR />&nbsp;&nbsp;&nbsp;at java.lang.reflect.Method.invoke(Method.java:597)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:183)<BR />&nbsp;&nbsp;&nbsp;… 33 more<BR />Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.<BR />&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)<BR />&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)<BR />&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)<BR />&nbsp;&nbsp;&nbsp;… 81 more<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>I have deleted the user and recreated it, changed permissions and changed it again to manager but nothing changes.</SPAN><BR /><SPAN>Oddly enough, I have one other manager of that site who experiences no problem.</SPAN><BR /><SPAN>Checking the user's right as admin, I can see that it has the proper rights:</SPAN><BR /><BR /><BLOCKQUOTE class="jive-quote">User Name:*******<BR />Groups:<BR />EMAIL_CONTRIBUTORS, site_AfvalPlan, site_AfvalPlan_SiteCollaborator, site_nirasburcom, site_nirasburcom_SiteCollaborator, site_press, site_press_SiteManager, staff<BR />Account Status:</BLOCKQUOTE><BR /><SPAN>In other sites, it happens also with other managers but not all.</SPAN><BR /><BR /><SPAN>This happens only in Share and not via Explorer or CIFS.</SPAN><BR /><BR /><SPAN>I don't know where to look.</SPAN><BR /><BR /><SPAN>Thanks for any input.</SPAN></BODY></HTML> Thu, 14 Jul 2011 07:36:50 GMT nimbus58 2011-07-14T07:36:50Z Lost permissions https://connect.hyland.com/t5/alfresco-archive/lost-permissions/m-p/256326#M209456 Hello,Following a migration from community 3.4.c to 3.4.d, I have a permissions problem concerning a few of my users.In one case, I have a user with manager permissions who cannot upload or change meta data anymore.The log is as follows:12:06:13,914&nbsp; ERROR [extensions.webscripts.AbstractRuntime] Exc Thu, 14 Jul 2011 07:36:50 GMT https://connect.hyland.com/t5/alfresco-archive/lost-permissions/m-p/256326#M209456 nimbus58 2011-07-14T07:36:50Z Re: Lost permissions https://connect.hyland.com/t5/alfresco-archive/lost-permissions/m-p/256327#M209457 <HTML><HEAD></HEAD><BODY><SPAN>OK, I admit, I am a worm!&nbsp; <img id="smileysurprised" class="emoticon emoticon-smileysurprised" src="https://connect.hyland.com/i/smilies/16x16_smiley-surprised.png" alt="Smiley Surprised" title="Smiley Surprised" />ops: </SPAN><BR /><BR /><SPAN>I had removed the group EVERYONE from the data dictionary.</SPAN><BR /><BR /><SPAN>I have put the group back with "consumer" rights and verified that all the sub-spaces inherited properly and Bingo!</SPAN><BR /><BR /><SPAN>For my penance, I shall review all the rights and permissions.</SPAN><BR /><BR /><SPAN>Nimbus58</SPAN></BODY></HTML> Wed, 20 Jul 2011 08:04:51 GMT https://connect.hyland.com/t5/alfresco-archive/lost-permissions/m-p/256327#M209457 nimbus58 2011-07-20T08:04:51Z