[Problem]
Users are not able to access contents of folders where they do not have permissions to access all folders preceding them in their path via CIFS. Via WebDav users are able to access folders they have permissions for regardless of permissions on parent folders.
[Details]
To demonstrate:
Create nested folders Company Home/L1/L2/L3/L4
Remove permission inheritance on L2 so that no users are explicitly allowed access
Grant access to a user 'test' on folder L4
Via CIFS direct access to L4 will not be possible as tested in Windows 7 and OSX 10.7:
\\<host>\Alfresco\L1\L2\L3\L4\
Via WebDav Access to L4 will be granted but attempting to access the parent folder results in a permission error:
http://test:test@<host>:8080/alfresco/webdav/L1/L2/L3/L4/
[Expected Result]
Permission behavior consistent between access methods.
[Actual Result]
Permission behavior not consistent between access methods.
[Additional Info]
This could be the result of the CIFS protocol specification specifying that permissions on each path component must be checked although to my knowledge this is not the case.
- is duplicated by
-
ALF-12940 Able to recurse into a sub-folder with read/write access but no access to the parent folder in CIFS
-
- Closed
-
-
MNT-7149 user cannot access their userhome over webdav using windows client if they dont have read / consumer rights for company home
- Closed
- is related to by
-
MNT-468 'Path not found' error in Share if user has no permissions to parent folders in breadcrumb
- Closed
-
MNT-6693 Webdav Does not allow a user to access spaces without read permission on parent spaces
- Closed
-
MNT-2035 Share - Error to display documents if user has no access to the parent folder
- Closed
- relates to
-
ALF-6008 CIFS permissions are not a mirror of Alfresco Explorer permissions
-
- Closed
-
-
MNT-7118 bug in CIFS TreeConnectAndX handling - no read permission on the parent folder but read permission on the child folder.
- Closed
-
MNT-7085 WebDAV behaves differently when mapping drive vs accessing via browser
- Closed