cancel
Showing results for 
Search instead for 
Did you mean: 

Guest executing javascript

slothrop
Champ in-the-making
Champ in-the-making
I have a javascript file that is defined in the extension/web-client-config-custom.xml file as follows:

<config>
      <actions>
         <!– Launch Add Aspect Dialog –>
         <action id="submit_contents">
            <permissions>
               <permission allow="true">Read</permission>
            </permissions>
            <label>Submit Contents</label>
            <script>/Company Home/Data Dictionary/Scripts/Dropdown/submitContents.js</script>
         </action>
         <!– Add actions to Actions Menu for a space in the SpaceBrowse screen–>         
         <action-group id="space_browse_menu">
            <action idref="submit_contents" />
         </action-group>
      </actions>
   </config>

Even after stripping the file down to:

alertMessage = "Got Here";//person.properties["cm:userName"];
var goBack = "<script>alert('" + alertMessage + "');history.back();</script>";
goBack;

I get a message when I try to execute it that says:

org.alfresco.error.AlfrescoRuntimeException: Error during command servlet processing: Access Denied. You do not have the appropriate permissions to perform this operation.
caused by:
org.alfresco.repo.security.permissions.AccessDeniedException: Access Denied. You do not have the appropriate permissions to perform this operation.
caused by:
net.sf.acegisecurity.AccessDeniedException: Access Denied

I started out with a much more complex javascript file but I simplified it to the point that I can't go much further and it still won't work.  Does anybody know what might be going on?
1 REPLY 1

slothrop
Champ in-the-making
Champ in-the-making
Is guest not allowed to execute javascripts?  I've invited guest as a contributer to any folder (like Data Dictionary and Data Dictionary/Scripts) that I think might be relevant.

Is guest a member of GROUP_EVERYBODY?