topic Re: cannot create object by normal user in Alfresco Archive

cannot create object by normal user

nick_l — Mon, 24 Jun 2013 04:14:03 GMT

I am using Alfresco 4.2.c and opencmis 0.8.0. When I connect Alfresco by Admin user, then he can create object. But if logging in as a user who is not in administration group and the home space has been set as /Company Home, then "cmispermissiondeniedexception:forbidden" exception occurs while creat

Re: cannot create object by normal user

sujaypillai — Mon, 24 Jun 2013 09:02:00 GMT

Hello Nick,

By default the user home is set under /Company Home/User Homes/<UserName> where in the default permissions are set as ROLE_OWNER (allowed) and <user> (allowed) which is not the case under /Company Home.

Re: cannot create object by normal user

nick_l — Mon, 24 Jun 2013 23:47:27 GMT

Hi Sujay,

Thanks for the reply.
Actually when I create a user, I already set his home space as /Company Home/ instead of /Company Home/User Homes/
So when I log in as this user from Alfresco console, he can actually create any objects under /Company Home/, the problem happens when I try to do the same by java code as shown in first post.

Re: cannot create object by normal user

sujaypillai — Tue, 25 Jun 2013 06:24:37 GMT

Hi Nick,

This code worked for me -


   public static void main(String[] args) {
      SessionFactory factory = SessionFactoryImpl.newInstance();
      Map<String,String> parameters = new HashMap<String, String>();
      
      parameters.put(SessionParameter.ATOMPUB_URL, "http://localhost:8080/alfresco/cmisatom");      
      parameters.put(SessionParameter.BINDING_TYPE, BindingType.ATOMPUB.value());
      parameters.put(SessionParameter.AUTH_HTTP_BASIC, "true");
      parameters.put(SessionParameter.USER, "testuser2");      
      parameters.put(SessionParameter.PASSWORD, "test123");
      parameters.put(SessionParameter.REPOSITORY_ID, "8d6fe36d-a3e0-40f4-aece-4639647c9bc8");
      
      Session session = factory.createSession(parameters);      
      System.out.println(">>> " + session.getRootFolder().getName());
      
      Map<String,String> folderProps = new HashMap<String, String>();
      folderProps.put(PropertyIds.OBJECT_TYPE_ID, "cmis:folder");
      folderProps.put(PropertyIds.NAME,"TestUser1234");
      session.getRootFolder().createFolder(folderProps);
      
   }
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The only difference between yours and mine is the use of statement -

parameters.put(SessionParameter.OBJECT_FACTORY_CLASS, "org.alfresco.cmis.client.impl.AlfrescoObjectFactoryImpl");‍

I was getting an error using it so ignored it.

Did you try to connect to your repository using the CMIS Workbench ?

When I connect using the same user i see the Allowable Actions for root folder [Company Home] as below -

CAN_UPDATE_PROPERTIES
CAN_GET_FOLDER_TREE
CAN_GET_PROPERTIES
CAN_GET_OBJECT_RELATIONSHIPS
CAN_GET_DESCENDANTS
CAN_GET_APPLIED_POLICIES
CAN_GET_CHILDREN
CAN_CREATE_DOCUMENT
CAN_CREATE_FOLDER
CAN_CREATE_RELATIONSHIP
CAN_GET_ACL
CAN_APPLY_ACL

Can you please check it from your side for the same user?

Re: cannot create object by normal user

nick_l — Wed, 26 Jun 2013 01:15:36 GMT

Yes I did check the allowable ations before creating the folder. CAN_CREATE_FOLDER permission is there, but it still gives me error when creating.

While logging as Administrator works.

Re: cannot create object by normal user

nick_l — Wed, 26 Jun 2013 05:57:02 GMT

I even removed
parameters.put(SessionParameter.OBJECT_FACTORY_CLASS, "org.alfresco.cmis.client.impl.AlfrescoObjectFactoryImpl");

But still no luck.

I need it in real scenario as I need some Alfresco defined Aspects.

Re: cannot create object by normal user

sujaypillai — Wed, 26 Jun 2013 08:12:04 GMT

What release are you using? I used Release 0.8.0.

Re: cannot create object by normal user

nick_l — Wed, 26 Jun 2013 22:32:38 GMT

I used 0.8.0 as well. I even tried 0.9.0-beta1, but no luck.
It is very weird, as the parent folder has already have CREATE_FOLDER ability, the still failing.
And why it is working when logging in as Administrator?