adding users

[michaelc]

I wanted to find out what is required.
I was going to allow site managers to add users to the system thru the invite external users.

but when the manager is not an admin it throws an error.
is there a way I can allow a manager to add users without granting them full system admin (ALFRESCO_ADMINISTRATORS) rights ?
possible to create a group to give them this access  ?

11:54:17,733 ERROR [org.springframework.extensions.webscripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 09280001 Web Script org/alfresco/repository/person/people.post requires admin authentication; however, a non-admin has attempted access.
org.springframework.extensions.webscripts.WebScriptException: 09280001 Web Script org/alfresco/repository/person/people.post requires admin authentication; however, a non-admin has attempted access.
    at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:288)
    at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:319)
    at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:177)
    at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:116)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
    at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:852)
    at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
    at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
    at java.lang.Thread.run(Thread.java:636)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[mrogers]

There's already an invitation process for site managers to add site members, is that not sufficient?

However the script you are calling script is restricted to admin users only.

[croc]

Hi,

Though I don't understand why you are doing what you are trying to do.

Check this java file: RepositoryContainer.java, Line: 288

It goes like:

 if (required == RequiredAuthentication.admin && !(authorityService.hasAdminAuthority() || AuthenticationUtil.getFullyAuthenticatedUser().equals(AuthenticationUtil.getSystemUserName())))
                    {
                        throw new WebScriptException(HttpServletResponse.SC_UNAUTHORIZED, "Web Script " + desc.getId() + " requires admin authentication; however, a non-admin has attempted access.");
                    }‍‍‍‍

So I am sure you can change there to make it do what you want.

Hope this helps.

Regads,
Croc