nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

In-Place record declaration

mbajpai

I want to declare an in-place record in alfresco . I created a rule on a folder to declare any incoming document as record , it works fine . But I am not able to do so via this call -

http://hostname:8080/alfresco/service/api/rma/actions/ExecutionQueue

Request body is -

{
"name":"declareRecord",
"nodeRef":"workspace://SpacesStore/f0053412-1e7c-4e30-b783-f30001624177"
}

I get an error as " Access Denied. You do not have the appropriate permissions to perform this operation " .

I am using postman to hit the alfresco endpoint .

The user is admin and is a member of RECORD_CONTRIBUTORS group .

We are using RM 2.5 , Alfresco 5.1.1

My question is does RM module has other restrictions which I am missing here ?

Any insight into this will be much appreciated

Find more posts tagged with

Alfresco Content Services

Comments

rwetherall

Hi,

So that call should work.

Can I conform that you have already created the RM site?

Also, can you check the log and post anything that you think might be relevant here.

Thanks

Roy

mbajpai

Yes . RM site is already there. I created a rule on a folder that declares the document as record when any document is uploaded in that folder .That means the user is able to declare a document as record . But from the same authentication I can not declare as record by the POST call .I am attaching the relevant logs . The error is "Access Denied ".

2017-04-12 19:28:12,681 ERROR [extensions.webscripts.AbstractRuntime] [http-apr-8080-exec-10] Exception from executeScript - redirecting to status template error: 03120018 Wrapped Exception (with status template): 03120465 Access Denied. You do not have the appropriate permissions to perform this operation.
org.springframework.extensions.webscripts.WebScriptException: 03120018 Wrapped Exception (with status template): 03120465 Access Denied. You do not have the appropriate permissions to perform this operation.

Caused by: org.alfresco.repo.security.permissions.AccessDeniedException: 03120465 Access Denied. You do not have the appropriate permissions to perform this operation.
at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:57)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:96)
at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:260)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:94)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at com.sun.proxy.$Proxy139.executeRecordsManagementAction(Unknown Source)
at org.alfresco.module.org_alfresco_module_rm.script.RmActionPost.executeImpl(RmActionPost.java:211)
at org.springframework.extensions.webscripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:64)
... 37 more
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
RM method security check was performed.
Failed on method: execute(workspace://SpacesStore/32b622f0-724c-4171-9d34-9f188f5edc0b, {})
; nested exception is net.sf.acegisecurity.AccessDeniedException: Access is denied.
at org.alfresco.module.org_alfresco_module_rm.security.RMMethodSecurityInterceptor.beforeInvocation(RMMethodSecurityInterceptor.java:325)
at org.alfresco.module.org_alfresco_module_rm.security.RMMethodSecurityInterceptor.invoke(RMMethodSecurityInterceptor.java:348)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at com.sun.proxy.$Proxy211.execute(Unknown Source)
at org.alfresco.module.org_alfresco_module_rm.action.RecordsManagementActionServiceImpl.executeRecordsManagementAction(RecordsManagementActionServiceImpl.java:290)
at org.alfresco.module.org_alfresco_module_rm.action.RecordsManagementActionServiceImpl.executeRecordsManagementAction(RecordsManagementActionServiceImpl.java:331)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

mbajpai

Also , in the documents Records Management global properties settings | Alfresco Documentation

it is explained that -

rm.record.contributors.group.enabled .

Set which groups can perform Records Management actions; for example, Declare as Record. Default is false.

If this is set to true, only members of the RECORD_CONTRIBUTORS group can perform these actions.

The admin user in my case is a member of RECORD CONTRIBUTORS group. I am not setting this or any property in the alfresco-global.properties file .