Site invite failures -- insufficient permissions to access preferences

[eseldura]

Inviting people to join the site fails and the log indicates that the current user does not have enough permissions to access the preferences of the person being invited. The problem does not happen for users that are members of the ALFRESCO_ADMINISTRATORS group.

Sample log entry below:


16:30:22,396 ERROR [org.springframework.extensions.webscripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 02120061 Wrapped Exception (with status template): 02127058 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/repository/site/invitation/invitation.post.json.js': 02127057 The current user user1@mysite.com does not have sufficient permissions to get the preferences of the user user2@mysite.com
org.springframework.extensions.webscripts.WebScriptException: 02120061 Wrapped Exception (with status template): 02127058 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/repository/site/invitation/invitation.post.json.js': 02127057 The current user user1@mysite.com does not have sufficient permissions to get the preferences of the user user2@mysite..com
Caused by: org.alfresco.scripts.ScriptException: 02127058 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/repository/site/invitation/invitation.post.json.js': 02127057 The current user user1@mysite.com does not have sufficient permissions to get the preferences of the user user2@mysite.com
Caused by: org.alfresco.repo.security.permissions.AccessDeniedException: 02127057 The current user user1@mysite.com does not have sufficient permissions to get the preferences of the user user2@mysite.com

[eswbitto]

Is your User1 a Manager of the Site?

[kbonnet]

We are suffering from the same problem. Any suggestions?

Koen

[eswbitto]

You are going to need to provide more information about your setup. Are you using any type of authentication subsystem? ldap?…etc? Or are you creating users within Alfresco?

Is it a basic vanilla install? Have you modified any files to change the default security settings within Alfresco?….etc.

[kbonnet]

My setup is fairly vanilla regarding authentication. I have tracked down the error to the function "getLocaleForUser" in MailActionExecuter.java. Another factor seems to be that it only happens for username that are emailaddresses. I guess we trigger something in the multi-tenancy part?

Still investigating

[loftux]

This issue is found here https://issues.alfresco.com/jira/browse/ALF-20897
There is a solution there, you will have to compile your own version of Alfresco.

[eseldura]

Yes, we've confirmed that this is a bug.  We've also confirmed that this affects workflow notifications.  When an adhoc task is created and assigned to a user whose login id is the same as the email address, the email notification does not get generated but the task is created for the assignee.