Uploaded image for project: 'Alfresco One Platform'
  1. Alfresco One Platform
  2. ACE-2020

Permissions error on setting PROP_OTHER_NODEREF_STRING on cloud

    Details

      Description

      When creating a new node on cloud. Permissions error on setting PROP_OTHER_NODEREF_STRING in someone else's sync set.

      Preconditions:
      a) Set up a sync'd folder to cloud set with user one's permissions.
      b) On cloud drop a new asset into that sync set as user two.
      c) User one does not have permission to update the new asset since they are not the asset's owner.

      Error is reported for CloudSyncConfirmPost. on cloud.

      Then there are knock on issues on cloud and on premise since an essential property is missing.

      {cloud}

      16:00:00,132

      {http-9080-4} WARN [org.alfresco.enterprise.repo.sync.deltas.SsmnChangeManagement] convert: localNodeRef does not exist workspace://SpacesStore/d2f0c31a-c70e-4c09-a01d-bc35359910b3 for non remove/delete event ('SSMN_ADDED)
      16:00:00,675 {http-9080-4}

      ERROR [org.alfresco.enterprise.repo.web.scripts.sync.transport.CloudSyncConfirmPost] unable to set PROP_OTHER_NODEREF_STRING
      org.alfresco.repo.security.permissions.AccessDeniedException: 05120009 Access Denied. You do not have the appropriate permissions to perform this operation.
      at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:50)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
      at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:164)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
      at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:110)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
      at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
      at $Proxy74.suspendLocks(Unknown Source)
      at org.alfresco.enterprise.repo.web.scripts.sync.transport.CloudSyncConfirmPost$2.execute(CloudSyncConfirmPost.java:188)
      at org.alfresco.enterprise.repo.web.scripts.sync.transport.CloudSyncConfirmPost$2.execute(CloudSyncConfirmPost.java:172)
      at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:454)
      at org.alfresco.enterprise.repo.web.scripts.sync.transport.CloudSyncConfirmPost.doSetOtherNodeRefForFolderCreates(CloudSyncConfirmPost.java:171)
      at org.alfresco.enterprise.repo.web.scripts.sync.transport.CloudSyncConfirmPost.executeSyncImpl(CloudSyncConfirmPost.java:122)
      at org.alfresco.enterprise.repo.web.scripts.sync.AbstractCloudSyncAbstractWebScript.execute(AbstractCloudSyncAbstractWebScript.java:66)
      at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:381)
      at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:563)
      at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:343)
      at org.alfresco.module.org_alfresco_module_cloud.webscripts.TenantSwitchingRepositoryContainer.access$201(TenantSwitchingRepositoryContainer.java:52)
      at org.alfresco.module.org_alfresco_module_cloud.webscripts.TenantSwitchingRepositoryContainer$2.doWork(TenantSwitchingRepositoryContainer.java:190)
      at org.alfresco.repo.tenant.TenantUtil.runAsWork(TenantUtil.java:119)
      at org.alfresco.repo.tenant.TenantUtil.runAsTenant(TenantUtil.java:88)
      at org.alfresco.module.org_alfresco_module_cloud.webscripts.TenantSwitchingRepositoryContainer.executeScript(TenantSwitchingRepositoryContainer.java:186)
      at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:378)
      at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:209)
      at org.alfresco.repo.web.scripts.TenantWebScriptServlet.service(TenantWebScriptServlet.java:74)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
      at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:61)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
      at org.alfresco.module.org_alfresco_module_cloud.webscripts.TenantLeakLogger.doFilter(TenantLeakLogger.java:56)
      at org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:82)
      at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
      at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
      at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
      at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
      at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
      at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
      at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
      at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
      at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
      at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
      at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
      at java.lang.Thread.run(Thread.java:722)
      Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
      at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
      at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:398)
      at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
      at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:46)
      ... 44 more

      
      

        Attachments

          Structure

            Activity

              People

              • Assignee:
                closedbugs Closed Bugs
                Reporter:
                mrogers Mark Rogers [X] (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 3 days, 1 hour
                  3d 1h

                    Structure Helper Panel