Access Denied

[thestorm]

Dear people,

I hope some1 could help me.

I have a simple workflow that content that is submited by an employee to his folder is automatically moved to the space of his boss. when i want to upload sth i get access denied cause the employee of course cant see the folder of the boss. Is there a way to change the workflow to a higher permission lvl or some other solution?

Best regards
Sebastian

[vinaxwater]

Hi friend

You want move one file from a space to a space You must have to all permission in target space. In this case workflow allow "Add Resource" therefore i don't understand what mean is for this issuse?

Regards.

[thestorm]

hi vinax

the employee has no permissions in the target folder, the workflow should move the file there and then there is a simple workflow for approve and reject for the boss.

The target folder shouldnt be readable for the employee only for the boss

[zaizi]

This is what you are after: http://wiki.alfresco.com/wiki/WorkflowAdministration#Run_As

[thestorm]

and how to add the out of the box feature move object to space and add simple workflow to the script space? (sorry im a java noob)

is it sth. like that script, i made a rule for content, execute a script, inbound and this script but its not movin

<action class="org.alfresco.repo.workflow.jbpm.AlfrescoJavaScript">
  <runas>admin</runas>
  <script>
   var folder=userhome.childByNamePath("Company Home/Dantotec Intranet/Service/Eingereichte Dokumente/");

   document.move(folder);
  </script>
</action>

[zaizi]

See http://forums.alfresco.com/en/viewtopic.php?f=36&t=12587&start=0&st=0&sk=t&sd=a for a previous discussion on this.

[thestorm]

there is no scripted solution to the problem theres a write only group but i guess thats a bad solution. I cant see the mistake in my Java Script, maybe some1 can help

[zaizi]

You can always create a "Drop Box" in the manager's home folder. With write permissions for all. As part of the work flow when the manager approves it, it is moved to a more secure area. This second copying can be run as the Manager.

[thestorm]

I tought of this but if the users have write permissions they could trigger the move process theirselfe or am I wrong?

[zaizi]

Folder A - employee folder
Folder B - manager drop box
Folder C - manager secure folder

Everyone can write to folder B. Set an inbound rule trigger that will start a work flow and assign it to the manager (or folder owner).

Manager approves the work flow, which copies it into folder C. Only the manager has write / read access to folder C.

There are better ways of doing this, but will require writing java / javascript code. The above should be configurable through the UI.