access problem

In our TeamSite structure, workareas are owned by local group(local to the TeamSite server). When a new user needs access to a particular workarea whatever global OS group s/he belongs to is added to the respective local group and thus given access.

We cleaned up some of the global groups(no longer needs access to that WA) from the local group. After doing so, remaining users are getting denial of permission to that WA.

I ran iwreset -a bu no use. Also looked into the log files, couldn't find anything specific.

Can someone provide some suggestion how to tackle this.

Regards,
Mav

Find more posts tagged with

Comments

Bhargav Coca

Always check with respect to one particular user. When a particular doesn't have access, check if he is part of the global group whihc was cleaned up by you, check if the same user is part of local group, if not add him to the local group and make sure that the group have access to your WA.

Easy way to do this is to add those users to a domain and use them as domain users in your local group, in that way they would be happy and you would be happy , cuz they would have access.

Thanks

curiousmaverick

well that leads me to nothing. i can expalin it to you again if you didn't get my point.

Regards,
Mav

sumitk

It seems that you add GLOBAL OS group to the LOCAL TS group. If you have deleted the GLOBAL OS group, then users in this group wont be able to access the WA owned by LOCAL TS group. Check whether affected users were part of the deleted GLOBAL OS group.

curiousmaverick

hmm..you just explained to me my question...

cesarecastro

You sure manage to mess thing up didn't you mav. When removing and adding groups you must be somewhat carefull cuase the users may not be happy with the results as you have encountered.

In any case, you asked the question how to tackle this issue and here is what I would do.

STEPS.
1. Select a WA that you want to test.
2. Navigate to the selected WA through the Y drive
3. Right click over the WA
4. Select Sharing and Security (I am assuming you are using windows. Based on your previous posts on other issues.)
5. Select the Security tab
6. Click on Advance
7. See the type of permission that your Global OS group has. If the selected group has Full control and you are still having problems go to the Owner tab and add the group as owner. Reset your server -ui then try -a if -ui does not work. ( I am not sure what you mean by Global OS group but I am making the assumption that these are local groups otherwise why would you have the OS in their name.)
8. If this does not work then the user you are testing with doesn't really belong to this group.

(word of advise - Why are you using local groups????? when you try to move or migrate your content store to a different server, you will have a **** of a time playing with group id and user ids that are specific to a server. Always try to use your domain groups and users as much as possible)