nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Access Denied

thestorm

Dear people,

I hope some1 could help me.

I have a simple workflow that content that is submited by an employee to his folder is automatically moved to the space of his boss. when i want to upload sth i get access denied cause the employee of course cant see the folder of the boss. Is there a way to change the workflow to a higher permission lvl or some other solution?

Best regards
Sebastian

Find more posts tagged with

Comments

vinaxwater

Hi friend

You want move one file from a space to a space You must have to all permission in target space. In this case workflow allow "Add Resource" therefore i don't understand what mean is for this issuse?

Regards.

thestorm

hi vinax

the employee has no permissions in the target folder, the workflow should move the file there and then there is a simple workflow for approve and reject for the boss.

The target folder shouldnt be readable for the employee only for the boss

zaizi

This is what you are after: http://wiki.alfresco.com/wiki/WorkflowAdministration#Run_As

thestorm

and how to add the out of the box feature move object to space and add simple workflow to the script space? (sorry im a java noob)

is it sth. like that script, i made a rule for content, execute a script, inbound and this script but its not movin

<action class="org.alfresco.repo.workflow.jbpm.AlfrescoJavaScript">
<runas>admin</runas>
<script>
var folder=userhome.childByNamePath("Company Home/Dantotec Intranet/Service/Eingereichte Dokumente/");

document.move(folder);
</script>
</action>

zaizi

See http://forums.alfresco.com/en/viewtopic.php?f=36&t=12587&start=0&st=0&sk=t&sd=a for a previous discussion on this.

thestorm

there is no scripted solution to the problem theres a write only group but i guess thats a bad solution. I cant see the mistake in my Java Script, maybe some1 can help

zaizi

You can always create a "Drop Box" in the manager's home folder. With write permissions for all. As part of the work flow when the manager approves it, it is moved to a more secure area. This second copying can be run as the Manager.

thestorm

I tought of this but if the users have write permissions they could trigger the move process theirselfe or am I wrong?

zaizi

Folder A - employee folder
Folder B - manager drop box
Folder C - manager secure folder

Everyone can write to folder B. Set an inbound rule trigger that will start a work flow and assign it to the manager (or folder owner).

Manager approves the work flow, which copies it into folder C. Only the manager has write / read access to folder C.

There are better ways of doing this, but will require writing java / javascript code. The above should be configurable through the UI.

sc_zix

I'm having the same problem here..
I'm also new to alfresco.
I haven't test the zaizi's last solution, though..

I'm guessing that: the rule of "apply to all" n "move to boss' folder" invoke this problem..
So, the permission to write in folder is re-directed to "boss' folder".
If this is right, maybe we can stop the script from checking the permission in the "move target" folder,
and only checking the folder where we upload the content.

regards,
Welly