Change Permission error

Hi,

I have a user who has delete permission and all the extended permission given on folder. The user is not the owner. He is trying to edit the ACL and add new user but while saving he is getting the error

Error committing changes in Security dialog.
[DM_SYSOBJECT_E_CANT_SAVE_ACL]error: "Failed to save the ACL 'dm_4501a5228001c17d' in domain '****' for the dm_folder '2 - Initiate'."

[DM_SYSOBJECT_E_CANT_CHANGE_XPERMITS]error: "Only the 2 - Initiate sysobject owner and superuser can change extended permits."

As I said the user has Delete and all the extended permissions.

Please Advice

Thanks

Find more posts tagged with

Comments

Viswa

What is your content server's default ACL configuration?

I think you have to change it to "folder" to avoid this error.

DCTM_Guru

The error message is self-explanatory:

"...sysobject owner and superuser can change extended permits."

Have your user change the owner of the folder to himself/herself and then he/she should be able to change the ACL afterwards.

ma_dctm

The user is just trying to add new user to the ACL and just assigning permission not changing the extended permission on existing ones.

Should the user be able to change ACL definition on object if he has "change permission assigned?

bacham2

"Change permission" means that you can change the permissions of your (document or folder) object.

What you are trying to do is change the ACL. You can't do that unless you are the owner of the ACL or superuser. This makes sense since the ACL may be associated to multiple objects.

Hicham

ma_dctm

So does 'Change Permission' means changing it to different ACL instead of current ACL?

Even if u change the ACL definition on current object it won't change the ACL itself and just creates a virtual copy of the ACL right?

bacham2

Correct. Either you associate another ACL or you create one on the fly.

If you change the permissions on the current object, it will create a new ACL that you own (nothing virtual to it).

Hicham

ma_dctm

Why do I get the error while changing the permission set on the current object by trying to add user to it with out touching the extended permission?

Can only super user or the owner change the permissions (Not extended permission, Add or remove users or groups) on the object?

zeva

Hi, as I know, you can use "grant" or "grant Permit" methods, if you want change ACL on specific object.

grant

void grant(String accessorName,
           int accessorPermit,
           String extendedPermission)
           throws DfException

Creates an access control entry in this object, assigning an access level to a specified user or group. This operation is not committed until a save or a checkin. Performs a DMCL "grant".

Parameters:: accessorName - specifies the name of the user or group to whom you are assigning the access level.; accessorPermit - the integer corresponding to the basic privilege level that you want to grant. You can pass 0 if you just wanted to change the extended permission and leave the basic permission the same.; extendedPermission - the extended permission that you want to grant; If you do not want to grant an extended permission, specify null for this parameter
Throws:: DfException - if a server error occurs.

anindyapal

ZEVA,

if u set null as extendedpermission by default change location and exec procedure will be applied. I have tested it. Do you know any otherway to make extended persmission none. IDfACL doest not have any static attribute to make it none. but all the other extended permission can be set like IDfACL.DF_XPERMIT_CHANGE_STATE.

taruns

Hi ,

I am also getting same error . I get this similar error when we use webtop 6.7 if i use webtop6.5 i am able to add user in ACL.

Did you find any solution ? Please let me know.

Regards,
Tarun