AccessDeniedException Copying Document

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

edemmorny

Hi,

I'm using Alfresco Community 3.4.c on Windows 7 with MySQL as my database.

I have created a "Registrar" user group and have added a user to this user group. I then created a "Samples" space in the Company Home and have made the "Registrar" group have permissions of Consumer, Editor, Collaborator and Coordinator in this "Samples" space. To make sure I'm not getting anything mixed up, I disable "Inheriting Parent Space Permissions". I then uploaded some word documents into this folder.

I created a different folder under the Company Home folder called "Customers" with the same permission scheme as above i.e. "Registrar" has Editor, Consumer, Collaborator and Coordinator roles. I also disable the parent permissions.

Now the problem is that when I now log in as any user in the "Registrar" group, I can't copy any of the documents from the "Samples" folder to the "Customer" folder. I get the ff in the log file

19:45:45,149 Useraul ERROR [ui.common.Utils] Unable to paste item due to system error:Transaction didn't commit: 03140002 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnUpdatePropertiesPolicy.onUpdateProperties(org.alfresco.service.cmr.repository.NodeRef,java.util.Map,java.util.Map) in transaction 04c40814-a714-4039-a41a-de1302383928
javax.transaction.RollbackException: Transaction didn't commit: 03140002 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnUpdatePropertiesPolicy.onUpdateProperties(org.alfresco.service.cmr.repository.NodeRef,java.util.Map,java.util.Map) in transaction 04c40814-a714-4039-a41a-de1302383928
   at org.alfresco.util.transaction.SpringAwareUserTransaction.commit(SpringAwareUserTransaction.java:482)
   at org.alfresco.web.bean.clipboard.WorkspaceClipboardItem.paste(WorkspaceClipboardItem.java:327)
   at org.alfresco.web.bean.clipboard.ClipboardBean.performClipboardOperation(ClipboardBean.java:262)
   at org.alfresco.web.bean.clipboard.ClipboardBean.performPasteItems(ClipboardBean.java:179)
   at org.alfresco.web.bean.clipboard.ClipboardBean.pasteAll(ClipboardBean.java:136)
…
Caused by: org.alfresco.error.AlfrescoRuntimeException: 03140002 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnUpdatePropertiesPolicy.onUpdateProperties(org.alfresco.service.cmr.repository.NodeRef,java.util.Map,java.util.Map) in transaction 04c40814-a714-4039-a41a-de1302383928
   at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:195)
   at org.alfresco.repo.policy.TransactionBehaviourQueue.beforeCommit(TransactionBehaviourQueue.java:127)
…
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
   at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
   at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
   … 111 more

Enabling parent permissions does not help. I can only do the copy and paste if i log out and log in as Administrator again. Can one only copy content into a folder that one explicitly owns, or can you be able to do that if you have the rights through association to an allowed user group?

edemmorny

Interestingly I can upload a document directly into both folders when logged in as a user in the "Registrar" group. This is really weird.