CIFS not working for me after upgrade to 3.4b

[ghernando]

I am running Alfresco community 3.4b on a WIndows XP machine.
I've upgraded from Alfresco 3.4a.  A lot of the bugs that I saw in 3.4a seem to be fixed.
But I now have a problem with CIFS.  It had  been working for me with 3.4a.

I have CIFS configured in the alfresco-global.properties file with just this:

cifs.enabled=true
cifs.serverName=alfrepo

After startup Alfresco  I can see that it is running OK.

With nbtstat -n I see the following:
                NetBIOS Local Name Table

       Name               Type         Status
    ———————————————
    ALFREPO        <20>  UNIQUE      Registered
    ALFREPO        <00>  UNIQUE      Registered

I actually seem to be able to map the drive successfully.  It shows up in my computer folder list.
After I start navigating (as admin) through about the first two folders (Company Home and Sites) I start getting the following error.
Once I get the error I get the error on every folder that I click on, even ones that it let me navigate before the error happened.
Note that admin is the creator (Site Management) of the Share sites, so he should have authorization.

15:55:18,546 User:admin ERROR [org.alfresco.fileserver] org.alfresco.repo.security.permissions.AccessDeniedException: 10090002 Access Denied.  You do not have the appropriate permissions to perform this operation.
org.alfresco.repo.security.permissions.AccessDeniedException: 10090002 Access Denied.  You do not have the appropriate permissions to perform this operation.
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:48)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:167)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy45.getStoreFreeSpace(Unknown Source)
   at org.alfresco.filesys.repo.ContentDiskDriver.getDiskInformation(ContentDiskDriver.java:3972)
   at org.alfresco.jlan.smb.server.ProtocolHandler.getDiskInformation(ProtocolHandler.java:157)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.procTrans2QueryFileSys(NTProtocolHandler.java:4030)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.processTransactionBuffer(NTProtocolHandler.java:1773)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.procTransact2(NTProtocolHandler.java:1600)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.runProtocol(NTProtocolHandler.java:232)
   at org.alfresco.jlan.smb.server.SMBSrvSession.runHandler(SMBSrvSession.java:1366)
   at org.alfresco.jlan.smb.server.SMBSrvSession.processPacket(SMBSrvSession.java:1458)
   at org.alfresco.jlan.smb.server.CIFSThreadRequest.runRequest(CIFSThreadRequest.java:59)
   at org.alfresco.jlan.server.thread.ThreadRequestPool$ThreadWorker.run(ThreadRequestPool.java:153)
   at java.lang.Thread.run(Thread.java:619)
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
   at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
   at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.model.ml.MLContentInterceptor.invoke(MLContentInterceptor.java:125)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
   … 19 more

A.)  What is wrong?  Why don't I have permission?
B.)  How can I fix this?

[gnyce]

I'm seeing something very similar here with CIFS and 3.4b out of the box, no customization… either in a User Home, or a newly-created Share site, I can open a .doc/.xls/.txt file directly, but trying to save gets me a AccessDeniedException: 10110004….  dont' quite see how this is truly a permissions problem, but will do some more digging.

[ghernando]

Let me know if you can figure anything out about this.
Right now for me 3.4b is looking good except for this problem.  This may cause me to go back to an earlier release.

Anyone else have any ideas?

[gnyce]

No success so far.  It is, for all intents and purposes, unusable to edit files in-place using CIFS.  My _hope_ is that there is some new security setting or something we are not aware of, but… I think that is a stretch.

[davidbalt]

Yes, this is definitely a bug.  I found these bugs that relate:

http://issues.alfresco.com/jira/browse/ALF-4526
http://issues.alfresco.com/jira/browse/ALF-3188 ** can't actually see this bug, but allegedly it is the original bug from above **

[hannesclp]

We are having the very same issue with an out of the box installation of 3.4b on a Ubuntu 10.04 System. Downgrading to 3.4a fixes the issue.

[loftux]

What if you try adding to alfresco-global.properties
filesystem.acl.global.defaultAccessLevel=Write

and for a particular user, try

filesystem.acl.global.userAccessControls=peter
filesystem.acl.global.userAccessControls.value.peter.accessType=Write

At first I thought this helped, but might be worth trying for others.
The reason I thought it worked was that I tested applying this, and upon restart did test with a plain text document. This works fine, you can edit and update. But as soon as you try to edit a MS word document (in my case 2003 version), you get access denied. And from there on, nothing works.

[loftux]

It seems like it works if you are coordinator on the space, so that you have full access to everything created in the folder. If I set the user to have Contributor, it gave access denied. Probably because some temp files get created with other user or system, and MS word are unable to read/delete them. Looks like it is not the case if You are Coordinator.

So for CIFS, it looks like you either give users just consumer rights, or full Coordinator rights.

Can someone else test this and confirm?

[gnyce]

I can try sometime later today.  I also note that there are new builds (dated Nov 15) in the nightly build directory for 3.4b.  It is probably too much to hope for such a speedy correction, but… going to try it anyway

[gnyce]

There does not seem to be any change in behavior with the Nov15 nightly of 3.4b (linux 32-bit). 

I also tried creating a site, made myself a Collaborator, and uploaded a txt file via CIFS…. opened, added some text, and when trying to save, alfresco.log recorded this immediately.  No joy.

06:45:06,960 ERROR [org.alfresco.fileserver] org.alfresco.repo.security.permissions.AccessDeniedException: 10160004 Access Denied.  You do not have the appropriate permissions to perform this operation.
org.alfresco.repo.security.permissions.AccessDeniedException: 10160004 Access Denied.  You do not have the appropriate permissions to perform this operation.
        at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:48)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:167)
        at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
        at $Proxy45.getStoreFreeSpace(Unknown Source)
        at org.alfresco.filesys.repo.ContentDiskDriver.getDiskInformation(ContentDiskDriver.java:3972)
        at org.alfresco.jlan.smb.server.ProtocolHandler.getDiskInformation(ProtocolHandler.java:157)
        at org.alfresco.jlan.smb.server.NTProtocolHandler.procTrans2QueryFileSys(NTProtocolHandler.java:3991)
        at org.alfresco.jlan.smb.server.NTProtocolHandler.processTransactionBuffer(NTProtocolHandler.java:1773)
        at org.alfresco.jlan.smb.server.NTProtocolHandler.procTransact2(NTProtocolHandler.java:1600)
        at org.alfresco.jlan.smb.server.NTProtocolHandler.runProtocol(NTProtocolHandler.java:232)
        at org.alfresco.jlan.smb.server.SMBSrvSession.runHandler(SMBSrvSession.java:1366)
        at org.alfresco.jlan.smb.server.SMBSrvSession.processPacket(SMBSrvSession.java:1458)
        at org.alfresco.jlan.smb.server.nio.NIOCIFSThreadRequest.runRequest(NIOCIFSThreadRequest.java:105)
        at org.alfresco.jlan.server.thread.ThreadRequestPool$ThreadWorker.run(ThreadRequestPool.java:153)
        at java.lang.Thread.run(Thread.java:619)
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
        at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
        at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)
        at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.alfresco.repo.model.ml.MLContentInterceptor.invoke(MLContentInterceptor.java:125)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
        … 19 more