RM 3.3 bad permissions error message

[rogerp]

Two things:

I used the admin account to set up a user to have Records Management Site permissions as Manager. However, logging in as that user, even though it shows as Manager doesn't appear to give that user manager permissions

The error message is user hostile:

03160019 Wrapped Exception (with status template): 03160059 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/slingshot/documentlibrary/dod5015-doclist.get.js': 03160058 Access Denied. You do not have the appropriate permissions to perform this operation.‍

Surely this exception should be trapped and a 'nicer' message should be emitted.

If I log in as admin, it's fine. As a non admin user but with "manager" permissions it's not.

What am I doing wrong?

[rogerp]

In case someone else gets the above error message, I have posted the solution:

Just inviting someone and giving them a role as manager isn't sufficient. You also have to place the person that you want to be manager in the group "Records Management Records Manager". This is achieved (from the admin account) in Share by going to Admin Console -> Groups and hitting the Browse button *not* the Search button. Hit the Browse button and this allows you to find the right groups to add users to. "Search" just winds you up in a place where you can't assign people to groups.

I haven't figured out what actually happens when "Invite" is used and the role "Manager" is chosen. It certainly doesn't add the invited user to the right group.

I also had to add the admin user to the Records Management Administrator group before that user got full control. I would have thought that would be a default setting but I guess there are good reasons why not.

It's obvious when you know how but I would suggest the whole thing is a bit inconsistent.

[mikeh]

It's obvious when you know how but I would suggest the whole thing is a bit inconsistent.

I had assumed the process was documented in the online Share help pages, but it doesn't seem to be - I'll let the Documentation Team know.

I agree it's somewhat inconsistent, but it's due to the extra security required by the DOD Standard. It might be the case that we can hide the Members and Invite links for the RM site - I'll take a look to see if they're still relevant in the RM case.

Thanks,
Mike