topic 'Access Denied' when trying to deletePermission of a folder node. in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/access-denied-when-trying-to-deletepermission-of-a-folder-node/m-p/282883#M236013 <HTML><HEAD></HEAD><BODY><SPAN>I have a requirement around changing ownership of a group of contents which live in a folder. The folder holds an html article with a number of associated files, for example, images. Now I have implemented a Web JavaScript which in turn calls following Java code to change ownership from current owner to the new owner. Note, as it is recommended, I am running it as ‘admin’ user, since current owner would not have enough privileges once his ‘FullControl’ access is removed. Note, I am disabling behavior and inheritance, but the source of exception is not the ‘deletePermission’ call, it seems it comes at the very end of the script. Looking at the Alfresco source code, I see a commit happening at the very end.</SPAN><BR /><BR /><SPAN>public void removePermission1(ScriptNode article, ScriptNode articleFolder, String oldUserName, String newUserName) {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;final NodeRef articleNodeRef = article.getNodeRef();</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;final NodeRef articleFolderNodeRef = articleFolder.getNodeRef();</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;final ScriptNode folder = articleFolder;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;final String toBeRemovedUserName = oldUserName;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;final String newOwnerUserName = newUserName;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;AuthenticationUtil.runAs(new AuthenticationUtil.RunAsWork() {</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; @Override</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; public String doWork() { </SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;behaviourFilter.disableBehaviour();</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;permissionService.setInheritParentPermissions(articleNodeRef, false);</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; try {</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; permissionService.deletePermission(articleFolderNodeRef, toBeRemovedUserName, PermissionService.FULL_CONTROL);</SPAN><BR /><SPAN>//&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; folder.save();&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; } finally {</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; behaviourFilter.enableBehaviour();</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; permissionService.setInheritParentPermissions(articleNodeRef, true);</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; return "ok";</SPAN><BR /><SPAN>&nbsp;&nbsp; }</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;}, "admin");</SPAN><BR /><SPAN>}</SPAN><BR /><BR /><SPAN>When the program runs, we get the following exception:</SPAN><BR /><BR /><SPAN>2013-12-17 13:23:45,363&nbsp; ERROR [extensions.webscripts.AbstractRuntime] [http-8080-3] Exception from executeScript - redirecting to status template error: 11171507 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnUpdatePropertiesPolicy.onUpdateProperties(org.alfresco.service.cmr.repository.NodeRef,java.util.Map,java.util.Map) in transaction a305d51d-c58b-4a7b-846d-312321524b00</SPAN><BR /><SPAN> org.alfresco.error.AlfrescoRuntimeException: 11171507 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnUpdatePropertiesPolicy.onUpdateProperties(org.alfresco.service.cmr.repository.NodeRef,java.util.Map,java.util.Map) in transaction a305d51d-c58b-4a7b-846d-312321524b00</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:257)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.policy.TransactionBehaviourQueue.beforeCommit(TransactionBehaviourQueue.java:134)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.AlfrescoTransactionSupport$TransactionSynchronizationImpl.doBeforeCommit(AlfrescoTransactionSupport.java:747)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.AlfrescoTransactionSupport$TransactionSynchronizationImpl.doBeforeCommit(AlfrescoTransactionSupport.java:727)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.AlfrescoTransactionSupport$TransactionSynchronizationImpl.beforeCommit(AlfrescoTransactionSupport.java:687)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.TransactionSynchronizationUtils.triggerBeforeCommit(TransactionSynchronizationUtils.java:95)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.AbstractPlatformTransactionManager.triggerBeforeCommit(AbstractPlatformTransactionManager.java:927)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:737)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:723)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:393)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.util.transaction.SpringAwareUserTransaction.commit(SpringAwareUserTransaction.java:472)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:423)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:479)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:517)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:333)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:377)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:209)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:132)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:61)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:291)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:602)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at java.lang.Thread.run(Thread.java:662)</SPAN><BR /><SPAN>Caused by: org.alfresco.repo.security.permissions.AccessDeniedException: 11171506 Access Denied.&nbsp; You do not have the appropriate permissions to perform this operation.</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:50)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:159)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.RetryingTransactionInterceptor$1.execute(RetryingTransactionInterceptor.java:79)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:401)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.RetryingTransactionInterceptor.invoke(RetryingTransactionInterceptor.java:69)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at $Proxy15.setProperty(Unknown Source)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.version.Version2ServiceImpl.createVersion(Version2ServiceImpl.java:358)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.version.Version2ServiceImpl.createVersion(Version2ServiceImpl.java:136)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.version.VersionableAspect.createVersionImpl(VersionableAspect.java:534)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.version.VersionableAspect.onUpdateProperties(VersionableAspect.java:514)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at java.lang.reflect.Method.invoke(Method.java:597)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.policy.JavaBehaviour$JavaMethodInvocationHandler.invoke(JavaBehaviour.java:173)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at $Proxy32.onUpdateProperties(Unknown Source)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at sun.reflect.GeneratedMethodAccessor317.invoke(Unknown Source)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at java.lang.reflect.Method.invoke(Method.java:597)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:245)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;… 34 more</SPAN><BR /><SPAN>Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:398)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:46)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;… 57 more</SPAN><BR /><BR /><SPAN>Looking at the exception, it seems, the execution fails when it tries to update the versionableAspect on the article node. To test my hypothesis, I turned off auto-versioning by adding the following line into alfresco-global.properties file:</SPAN><BR /><BR /><SPAN>version.store.enableAutoVersioning=false</SPAN><BR /><BR /><SPAN>Now the code runs successfully and the parent folder has the correct permission for the new owner.</SPAN><BR /><BR /><SPAN>First is my understanding correct? If so how would I disable the behavior for this run? Should I try from the Java code? There is a JavaScript API for disabling rules, utils.disableRule(), but none for behavior.</SPAN><BR /><SPAN>&nbsp; </SPAN><BR /><SPAN>Any help is appreciated here.</SPAN><BR /><BR /><SPAN>Koorosh</SPAN><BR /></BODY></HTML> Tue, 17 Dec 2013 22:50:38 GMT kooroshv 2013-12-17T22:50:38Z 'Access Denied' when trying to deletePermission of a folder node. https://connect.hyland.com/t5/alfresco-archive/access-denied-when-trying-to-deletepermission-of-a-folder-node/m-p/282883#M236013 I have a requirement around changing ownership of a group of contents which live in a folder. The folder holds an html article with a number of associated files, for example, images. Now I have implemented a Web JavaScript which in turn calls following Java code to change ownership from current owne Tue, 17 Dec 2013 22:50:38 GMT https://connect.hyland.com/t5/alfresco-archive/access-denied-when-trying-to-deletepermission-of-a-folder-node/m-p/282883#M236013 kooroshv 2013-12-17T22:50:38Z Re: 'Access Denied' when trying to deletePermission of a folder node. https://connect.hyland.com/t5/alfresco-archive/access-denied-when-trying-to-deletepermission-of-a-folder-node/m-p/282884#M236014 <HTML><HEAD></HEAD><BODY><SPAN>I am experiencing the same problem. Any news regarding this issue??</SPAN></BODY></HTML> Wed, 19 Feb 2014 13:45:05 GMT https://connect.hyland.com/t5/alfresco-archive/access-denied-when-trying-to-deletepermission-of-a-folder-node/m-p/282884#M236014 sandermvdb 2014-02-19T13:45:05Z Re: 'Access Denied' when trying to deletePermission of a folder node. https://connect.hyland.com/t5/alfresco-archive/access-denied-when-trying-to-deletepermission-of-a-folder-node/m-p/282885#M236015 <HTML><HEAD></HEAD><BODY><SPAN>iam also getting the same error with alfresco web editor.Any one solved this issue.</SPAN></BODY></HTML> Mon, 01 Sep 2014 07:43:06 GMT https://connect.hyland.com/t5/alfresco-archive/access-denied-when-trying-to-deletepermission-of-a-folder-node/m-p/282885#M236015 mahesh33 2014-09-01T07:43:06Z