ERROR 500 when downloading document

[alibaba]

I upload new document. Add access rights (editor) to another user and send him a link. He opens it, see the document. When he try to download it there is an error


Exception:   net.sf.acegisecurity.AccessDeniedException - Access is denied.

net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:398)
net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:46)
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
….



But he can download the document using "view in browser button"

Alfresco 5.0.c

[ofnavarro]

Have you solved this problem?

We have the same issue in Alfresco Community 5.0.b.

It looks that is the same that https://issues.alfresco.com/jira/browse/MNT-12879 but i don´t know if it has been solved.

Thanks in advance

[ofnavarro]

Hi,

After make a lot of investigations this issue appears to be a permissions problem with the execution of the following functions: org.alfresco.repo.site.SiteServiceImpl.getSiteNodeRef and org.alfresco.service.cmr.repository.NodeService.getPrimaryParent.

We have extended the  rm-method-security.properties file adding the following lines:

rm.methodsecurity.org.alfresco.service.cmr.repository.NodeService.getPrimaryParent=RM_ALLOW
rm.methodsecurity.org.alfresco.service.cmr.repository.NodeService.getNodeRef=RM_ALLOW
rm.methodsecurity.org.alfresco.service.cmr.site.SiteService.getSite=RM_ALLOW
rm.methodsecurity.org.alfresco.service.cmr.site.SiteService.getSiteNodeRef=RM_ALLOW
‍‍‍‍‍‍

I hope it can help you.