<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Why do you need to be assigned as an administrator to customize your personal dashboard? in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/why-do-you-need-to-be-assigned-as-an-administrator-to-customize/m-p/280933#M234063</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;&lt;STRONG&gt;Alfresco Community - 5.2.0 (r130508-b9)&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;&lt;SPAN class="value"&gt;Windows Server 2012 R2&lt;/SPAN&gt;&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Using LDAP-AD&lt;/STRONG&gt;&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;TABLE border="1"&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;&lt;P&gt;### AD Sync ###&lt;/P&gt;&lt;P&gt;authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-ad&lt;/P&gt;&lt;P&gt;ntlm.authentication.sso.enabled=false&lt;/P&gt;&lt;P&gt;ldap.authentication.allowGuestLogin=false&lt;/P&gt;&lt;P&gt;ldap.authentication.userNameFormat=%s@***&lt;/P&gt;&lt;P&gt;ldap.authentication.java.naming.provider.url=ldap://***:389&lt;/P&gt;&lt;P&gt;ldap.authentication.defaultAdministratorUserNames=Administrator, systems&lt;/P&gt;&lt;P&gt;ldap.synchronization.java.naming.security.principal=administrator@***&lt;/P&gt;&lt;P&gt;ldap.synchronization.java.naming.security.credentials=***&lt;/P&gt;&lt;P&gt;ldap.synchronization.groupSearchBase=ou=Groups,ou=Cornerstone Housing,dc=LCHSU,dc=local&lt;/P&gt;&lt;P&gt;ldap.synchronization.userSearchBase=ou=Users,ou=Cornerstone Housing,dc=LCHSU,dc=local&lt;/P&gt;&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;User needs to be assigned to the '&lt;SPAN class="field-label-right"&gt;&lt;/SPAN&gt; &lt;SPAN class="field-value"&gt;ALFRESCO_ADMINISTRATORS&lt;/SPAN&gt;' group in order to change their individual dashboards - including hiding the 'Getting Started' panel from the dashboard or from the customisation page.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;When they do try to make changes to their dashboard, alfresco.log spits out the following:&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;TABLE border="1"&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD&gt;&lt;P&gt;2016-10-27 17:00:29,140 ERROR [org.springframework.extensions.webscripts.AbstractRuntime] [http-apr-9090-exec-10] Exception from executeScript: 09270502 Access Denied.&amp;nbsp; You do not have the appropriate permissions to perform this operation.&lt;/P&gt;&lt;P&gt;org.alfresco.repo.security.permissions.AccessDeniedException: 09270502 Access Denied.&amp;nbsp; You do not have the appropriate permissions to perform this operation.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:57)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:166)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.transaction.RetryingTransactionInterceptor$1.execute(RetryingTransactionInterceptor.java:86)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:464)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.transaction.RetryingTransactionInterceptor.invoke(RetryingTransactionInterceptor.java:76)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at com.sun.proxy.$Proxy20.addAspect(Unknown Source)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.web.scripts.bean.ADMRemoteStore.deleteDocument(ADMRemoteStore.java:632)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.web.scripts.bean.BaseRemoteStore.execute(BaseRemoteStore.java:302)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.web.scripts.RepositoryContainer$3.execute(RepositoryContainer.java:512)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:464)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:587)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:656)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.web.scripts.RepositoryContainer.executeScriptInternal(RepositoryContainer.java:428)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:308)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:399)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:210)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:132)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.module.aosmodule.service.ContextRootFilter.doFilter(ContextRootFilter.java:93)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:68)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:504)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:421)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1074)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.doRun(AprEndpoint.java:2466)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.run(AprEndpoint.java:2455)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at java.lang.Thread.run(Unknown Source)&lt;/P&gt;&lt;P&gt;Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:398)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:53)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ... 48 more&lt;/P&gt;&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This seems odd as this should be a pretty rudimentary function that shouldn't require elevated privileges&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any ideas? Could there be a conflict with the AD?&lt;/P&gt;&lt;P&gt;I've trolled the forums but can't seem to find anything...surely this isn't unique?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 27 Oct 2016 06:36:22 GMT</pubDate>
    <dc:creator>dummin</dc:creator>
    <dc:date>2016-10-27T06:36:22Z</dc:date>
    <item>
      <title>Why do you need to be assigned as an administrator to customize your personal dashboard?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/why-do-you-need-to-be-assigned-as-an-administrator-to-customize/m-p/280933#M234063</link>
      <description>Alfresco Community - 5.2.0 (r130508-b9)Windows Server 2012 R2Using LDAP-AD### AD Sync ###authentication.chain=alfinst:alfrescoNtlm,ldap1:ldap-adntlm.authentication.sso.enabled=falseldap.authentication.allowGuestLogin=falseldap.authentication.userNameFormat=%s@***ldap.authentication.java.naming.provi</description>
      <pubDate>Thu, 27 Oct 2016 06:36:22 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/why-do-you-need-to-be-assigned-as-an-administrator-to-customize/m-p/280933#M234063</guid>
      <dc:creator>dummin</dc:creator>
      <dc:date>2016-10-27T06:36:22Z</dc:date>
    </item>
    <item>
      <title>Re: Why do you need to be assigned as an administrator to customize your personal dashboard?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/why-do-you-need-to-be-assigned-as-an-administrator-to-customize/m-p/280934#M234064</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;No ,not need to be an administrator to customize personal dashboard.&lt;/P&gt;&lt;P&gt;is this all log information in alfresco.log? could you please attach alfresco.log file here?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 27 Oct 2016 08:44:58 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/why-do-you-need-to-be-assigned-as-an-administrator-to-customize/m-p/280934#M234064</guid>
      <dc:creator>kaynezhang</dc:creator>
      <dc:date>2016-10-27T08:44:58Z</dc:date>
    </item>
    <item>
      <title>Re: Why do you need to be assigned as an administrator to customize your personal dashboard?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/why-do-you-need-to-be-assigned-as-an-administrator-to-customize/m-p/280935#M234065</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hmm, I just reproduced this on 201609-EA running on Mac OS with Alfresco NTLM users.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 27 Oct 2016 14:57:36 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/why-do-you-need-to-be-assigned-as-an-administrator-to-customize/m-p/280935#M234065</guid>
      <dc:creator>jpotts</dc:creator>
      <dc:date>2016-10-27T14:57:36Z</dc:date>
    </item>
    <item>
      <title>Re: Why do you need to be assigned as an administrator to customize your personal dashboard?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/why-do-you-need-to-be-assigned-as-an-administrator-to-customize/m-p/280936#M234066</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;&lt;B&gt;Craig Dummin&lt;/B&gt;​ given that I was able to reproduce this on an out-of-the-box install of 201609-EA without using LDAP and with no other customizations installed, I'd say this is a bug. I did a quick search on Jira and saw nothing, but I didn't look too thoroughly.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Maybe you could also give &lt;A href="http://issues.alfresco.com/" rel="nofollow noopener noreferrer"&gt;Jira&lt;/A&gt; a scrub and then create a new issue if you cannot find one?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Also, if you were trying to use Alfresco Community Edition in production, you should be using 201605-GA, which is currently the latest stable release.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 27 Oct 2016 15:12:17 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/why-do-you-need-to-be-assigned-as-an-administrator-to-customize/m-p/280936#M234066</guid>
      <dc:creator>jpotts</dc:creator>
      <dc:date>2016-10-27T15:12:17Z</dc:date>
    </item>
  </channel>
</rss>

