04-09-2009 8:24 PM
The error message: "Permission denied: uri=/kmfolder,
permission=node_create_child, user=XXXXXX"
Background:
We are using a KM Windows repository to connect KM to a Windows shared
folder over the network. Then we are using a Web Dynpro java
application to write a file to the KM Folder, which is then mapped to
that KM Windows repository.
Security on the Windows shared folder is wide open. Everyone=Full
Control, and Domain Users=Full control.
Problem:
When end users try to write the file to KM through the Web Dynpro app,
they get the error:
"Permission denied: uri=/dm_filenet, permission=node_create_child,
user=XXXXXX"
But when we give them the Content Admin role, they are able to write
the file just fine. For this reason, I do not believe there is a
Windows permission issue.
We have tried:
-Explicitly setting User Mapping through User Admin -> Identity
Management
-Using a System Principle role with Full Access (Read, write, delete)
-Duplicating the Content Admin role, removing the pages & iViews (so
they can't view the Content Admin interface) and assigning this role to
our test users.
We have setup:
Network path
- ->jCIFS=True
- ->Network path=
<serv.host.com>\<sharename>
- ->User=<domain>\<ADMIN User>
KM Windows System Object
- ->User Mapping=admin,user
KM Windows System Landscape Definition
CM Repository Manager
- ->Prefix=/<sharename>
- ->Persistance Mode=fsdb
- ->Root directory=
<serv.host.com>\<sharename>\root
- ->Root directory for versions=
<serv.host.com>\<sharename>\versions
- ->Repository services=svc_acl
- ->Security Manager=W2kSecurityManager
- ->ACL Manager Cache=ca_rsrc_acl
04-10-2009 6:13 PM