nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Author,Editor role Configuration

System

Hi,

I am using teamsite 6.5.

I added two users tsuser1 as author and tsuser2 as editor to usergroup
Administrators.

I have switched on branch and workarea security.

When ever i try to edit the existing dcr with the editor role, i am getting error message as "not a writable workarea".i am not able to set the folder permissions for workarea "Internet" for the users tsuser2,tsuser1.Is there any configuration files to change.

My folder structure is like below
Y:\default\main\test\WORKAREA\Internet

Kindly advise

Find more posts tagged with

Comments

stefanmaier

Hi,
did you do an "iwreset"?
You should do that, if you change your rolefiles or any access groups...

ravio

Is your user in question an explicit owner or in the group for sharing that particular workarea?

Bill Klish

Is the group for sharing set to \Administrators on test branch and Internet workarea?

Migrateduser

Is your user in question an explicit owner or in the group for sharing that particular workarea?

My user is in the Administrators group of the workarea, it is not a explicit owner

Migrateduser

Is the group for sharing set to \Administrators on test branch and Internet workarea?

Yes my sharing is set to domain\Administrators (group) and set to domain\Administrator (user)in the test branch.Administrator is the master account who is also in the group Administrators.

stefanmaier

Yes my sharing is set to domain\Administrators (group) and set to domain\Administrator (user)in the test branch.Administrator is the master account who is also in the group Administrators.

Hi,
if you use domain (local?) groups, set domain_local_groups=yes in section [iwserver] in your iw.cfg.
I don't know, if you have to reboot your system after changing this value in iw.cfg, perhaps you do it...

Migrateduser

Hi,
if you use domain (local?) groups, set domain_local_groups=yes in section [iwserver] in your iw.cfg.
I don't know, if you have to reboot your system after changing this value in iw.cfg, perhaps you do it...

our is actually a local group...all user are local doesnt belong to domain...does the above command applies?
is the permission setting for editor rights in temasite tight to windows folder setting permission??
What else do i need to set in teamsite after i set the folder permission right..
Right now i have a problem i am unable to remove "everyone" from the folder right.
path is y:\default\main\TEST\Workarea\ (i cannot add permssion to this folder got a access is denied error.I am logged in as administrator(local))

path is y:\default\main\TEST\Workarea\internet (cannot add also..whenever i tried to add a user name editor when i clcik apply the name will disappear..)
is there any configuration in teamsite that i need to set to enable the permission setting fo these folders..
Thank You

stefanmaier

Hi,

our is actually a local group...all user are local doesnt belong to domain...does the above command applies?

You need the value domain_local_groups=yes if you are using domain local groups for setting permissions in your store.
If you are using server local groups, you don't need it.

is the permission setting for editor rights in temasite tight to windows folder setting permission??

A users role and a users permission on a folder are two different things.
A editor login doesn't mean, that he has access to everything automatically.
Did I get your question correctly?

What else do i need to set in teamsite after i set the folder permission right..

That's what we do to create a new workarea with all permissions:
1. create a new group (server local or domain local)
2. put some users in this group
3. create a new workarea (shared by this new group). if you check the permissions on this new workarea directory the new group has full access.
4. in some workareas we need to have a finer permission model on subfolders within the workarea. if so, we restrict the permissions on these subfolders.
(we don't change the permission od the workarea directory itself, 'cause this has effects on the whole workarea)
5. after all we start an "iwreset"

Right now i have a problem i am unable to remove "everyone" from the folder right.
path is y:\default\main\TEST\Workarea\ (i cannot add permssion to this folder got a access is denied error.I am logged in as administrator(local))

You can't put any file in this folder. I think, it's not relevant to change the permission of this directory. every TeamSite user has to work in a workarea
directly.

path is y:\default\main\TEST\Workarea\internet (cannot add also..whenever i tried to add a user name editor when i clcik apply the name will disappear..)
is there any configuration in teamsite that i need to set to enable the permission setting fo these folders..

If everyone should work in a shared workarea, I recommend to put "everyone" into the shared group of this workarea (step 2 in listing above)

I hope this would help you

Migrateduser

hi stefanmaier,

thank for the detailed reply...regarding the last part...
=======================================================
Originally Posted by Leoh
path is y:\default\main\TEST\Workarea\internet (cannot add also..whenever i tried to add a user name editor when i clcik apply the name will disappear..)
is there any configuration in teamsite that i need to set to enable the permission setting fo these folders..
========================================================

can i dun set access everyone..i just want certain user to be able to access that particular workarea...seems like i cannot add additional user....any idea?

stefanmaier

I suggest, that all users, who have to work somewhere within a workarea (= need access to the workarea), should be add to the workarea's shared group.
They should not be added directly to the workarea directory (...\Workarea\internet)
(Don't forget to start an iwreset afterwards...)

Migrateduser

does the above guide applies to ts installed on windows 2000 server...
i dun think wk2 server has domain local scope setting....
ok i added one user named editor in the windows 2000 local user group and then i add a editor.uid with the following entry inside

-----------------------
cockatoo-server\Administrator
cockatoo-server\editor
SYSTEM
domain\user
----------------------
just wondering how does ts knows that cockatoo-server\editor refers to the editor i created in windows 2000???

i tried to give full control to one file inside the workarea to editor still cannot work..i got an error
"Not a writable workarea: //cockatoo-server/default/main/IDA/WORKAREA/Internet"

my ts server is a standalone server not connected to any domain controller....it is in workgroup do i still need "domain_local_groups"...?

Migrateduser

i have tried putting both domain_local_groups=yes and without....no effect for my case...
i created a group called "editorgp" and dump "editor" into the group give it full control to one of the folder...
when i tried to edit one file in the folder i get the error
---------------------------------------------------------------
"Not a writable workarea: //cockatoo-server/default/main/IDA/WORKAREA/Internet" Smiley Sad

..very sad.....
------------------------------------------------------------------

i notice something..when i click on the properties of this file i see this line
--------------------------------------------------------------------
Permissions: Everyone:Full Control (All),COCKATOO-SERVER\editorgp:Full Control (All),cockatoo-server\Administrator:Full Control (All)
------------------------------------------------------------------
that means editorgp has full control on this file but i just cant edit it...

stefanmaier

Hi,
let me summarize what you have:
- there exists an local user named "editor" on your server "cockatoo-server".
- "editor" is in the local group "editorgp".
- you have a workarea called "Internet"

Can you do these next steps for testing?
1. Create a new workarea, with the shared group "cockatoo-server\editorgp".
2. check the access rights of this workarea: "cockatoo-server\editorgp" should have full access.
3. start iwreset
4. try to edit something in this workarea with user "editor".

application_analysis_daily_sampledb.rptdesign

Copy of productsalesacctype_dates_noproductcategory.rptdesign

Migrateduser

thanks.....Thank you so much....i found out the problem..cause we set it to private.....how do we actually changed existing permission from "private" to "shared" for workarea..thank....or do we have to recreate a new workarea

stefanmaier

Hi,
I would suggest, that you recreate the workarea.