Workarea Access Issue - TS721

We have upgraded from TS 6.5 SP3 to TS 7.2.1. Among 3 stores, we are facing workarea access issue with all the 6.5 workareas of one store only.

During Testing, I have created branches (after upgrade) and I don't have any issue with the workareas under them. But if I create a new workarea under 6.5 branch, the issue remains there.

Attached is the error captured in content_center log.

Note:- The issue is occured for Editor & Author roles only. Masters can access all workareas without any issue

Appriciate any help on this!

Find more posts tagged with

Comments

Adam Stoller

Great, you've got a permission denied error - which generally means there's a problem with permissions.

Consider using commands like:

Verify that the users have roles on the branch in question and that they have proper access at the file system level too.If everything looks okay from the back end, try restarting iwjboss (we've been having issues with it occasionally) and try again.

jayantb

Thanks Ghoti

We are using Server - Windows 2003 EE.

Can you please suggest which commands should I execute to verify if the file system permissions are ok or not?

Adam Stoller

Thanks Ghoti

We are using Server - Windows 2003 EE.

Can you please suggest which commands should I execute to verify if the file system permissions are ok or not?

Based on that - I would change the original list I already gave you as follows:

Other than that, I already gave you the list I'd start with - have you tried using it?

jayantb

I have executed all the iwaccess commands on different stores - One who is having access issue (default) and the other doesn't have with the userid has Editor access.

I couldn't find any major difference in default store expect the user does not have reviewer access at the top level branch? but has both editor & Reviewer in the sub-branches where the issue is. Does it make any difference?

Adam Stoller

I have executed all the iwaccess commands on different stores - One who is having access issue (default) and the other doesn't have with the userid has Editor access.

I couldn't find any major difference in default store expect the user does not have reviewer access at the top level branch? but has both editor & Reviewer in the sub-branches where the issue is. Does it make any difference?

Editor and Reviewer are roles in TeamSite - if that' s the same - great.

Have you verified that the users have the same permissions at the OS level?

You need to have both a role on the branch and permissions on the files and directories leading up to the directory / files you want to act on.

jayantb

Both users have same permissions at OS level.

I have verified the permissions in TeamSite and at OS level till the workarea folder. It's same.

Is there anything I can check or compare? Am I missing something here?

For testing I have created two OS level users with Editor access and added them in the respective groups under different stores. User added in default store still not able to access the workarea but the other user can access and perform all action in the workarea.

Adam Stoller

If you can post the output from the commands I listed, for both a user who has access and a user who doesn't seem to have access - maybe - we'll be able to spot something that you're overlooking.

Otherwise (or perhaps in addition) you should open a case with Support.

Once thing you can try - is to put this entry in your iw.cfg:

[iwserver]
log_permissions=yes

Then run iwreset and attempt to access the branch/workarea/folder/files.

I suggest you navigate to where you want to be (for both users) before you make the change to iw.cfg - make the change, run iwreset, refresh the browser for one user - wait until it's finished, then refresh the browser for the other user - wait until it's finished - then immediately comment out the setting in iw.cfg and run iwreset again.

This is best done during an otherwise dormant period for your server - it will generate a LOT of output in iwtrace.log (if you have automatic log rollover set you might have to look at more than one log file) - the less additional traffic going on, the cleaner the log files will be.

jayantb

Hi Ghoti,

I have attached the log files and command outputs for your reference.

Please let me know if you find anything in it or you need more information.

Adam Stoller

Hi Ghoti,

I have attached the log files for your reference.

Please let me know if you find anything in it.

Perhaps you misunderstood me.
I said "post the output from the [CLT] commands" that I suggested you run. As a reminder:[quote=ghoti]Consider using commands like:

I have no intention of trying to read through those log files to debug your issue for you - you'll have to do that yourself and/or try to get help from Support.