cancel
Showing results for 
Search instead for 
Did you mean: 

Site invite failures -- insufficient permissions to access preferences

eseldura
Champ in-the-making
Champ in-the-making
Inviting people to join the site fails and the log indicates that the current user does not have enough permissions to access the preferences of the person being invited. The problem does not happen for users that are members of the ALFRESCO_ADMINISTRATORS group.

Sample log entry below:


16:30:22,396 ERROR [org.springframework.extensions.webscripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 02120061 Wrapped Exception (with status template): 02127058 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/repository/site/invitation/invitation.post.json.js': 02127057 The current user user1@mysite.com does not have sufficient permissions to get the preferences of the user user2@mysite.com
org.springframework.extensions.webscripts.WebScriptException: 02120061 Wrapped Exception (with status template): 02127058 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/repository/site/invitation/invitation.post.json.js': 02127057 The current user user1@mysite.com does not have sufficient permissions to get the preferences of the user user2@mysite..com
Caused by: org.alfresco.scripts.ScriptException: 02127058 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/repository/site/invitation/invitation.post.json.js': 02127057 The current user user1@mysite.com does not have sufficient permissions to get the preferences of the user user2@mysite.com
Caused by: org.alfresco.repo.security.permissions.AccessDeniedException: 02127057 The current user user1@mysite.com does not have sufficient permissions to get the preferences of the user user2@mysite.com


6 REPLIES 6

eswbitto
Confirmed Champ
Confirmed Champ
Is your User1 a Manager of the Site?

kbonnet
Champ in-the-making
Champ in-the-making
We are suffering from the same problem. Any suggestions?

Koen

eswbitto
Confirmed Champ
Confirmed Champ
You are going to need to provide more information about your setup. Are you using any type of authentication subsystem? ldap?…etc? Or are you creating users within Alfresco?

Is it a basic vanilla install? Have you modified any files to change the default security settings within Alfresco?….etc.

kbonnet
Champ in-the-making
Champ in-the-making
My setup is fairly vanilla regarding authentication. I have tracked down the error to the function "getLocaleForUser" in MailActionExecuter.java. Another factor seems to be that it only happens for username that are emailaddresses. I guess we trigger something in the multi-tenancy part?

Still investigating

loftux
Star Contributor
Star Contributor
This issue is found here https://issues.alfresco.com/jira/browse/ALF-20897
There is a solution there, you will have to compile your own version of Alfresco.

eseldura
Champ in-the-making
Champ in-the-making
Yes, we've confirmed that this is a bug.  We've also confirmed that this affects workflow notifications.  When an adhoc task is created and assigned to a user whose login id is the same as the email address, the email notification does not get generated but the task is created for the assignee.