nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Unable to Access Workarea after migration

Env

Teamsite 7.4.1

Windows 2008 R2

Ran iwmigratre to migrate branches from 6.7.2 to 7.4.1 and then ran iwidimap to migrate users

I can access the workareas as a master but i am unable to access the workarea as a adminsitrator or as a editor.

I have made sure that the TS Group trying to access the workarea are added as Editor Role and is also the group for sharing on the workarea.

This problem exists only for migrated content and not for any new branches/workareas that I create

Logs have the following error

com.interwoven.cssdk.access.CSAuthorizationException: //WIISMAB00035Q55/default/main/DotCom/WORKAREA/temp/.(Permission denied)

at com.interwoven.cssdk.sci.exception.ExceptionHandler.handleExceptionSci(ExceptionHandler.java:188)

at com.interwoven.cssdk.sci.filesys.CSFile.getDirectoryContentsBatchWithQuery(CSFile.java:1612)

at com.interwoven.cssdk.sci.filesys.FileServiceFileSciImpl.getDirectoryContentsWithQueryBatch(FileServiceFileSciImpl.java:916)

at com.interwoven.cssdk.sci.filesys.FileServiceSciImpl.getDirectoryContentsWithQueryBatch(FileServiceSciImpl.java:1401)

at com.interwoven.cssdk.filesys.java.FileServiceAdapterImpl.getDirectoryContentsWithQueryBatch(FileServiceAdapterImpl.java:232)

at com.interwoven.cssdk.filesys.impl.CSFileEAIteratorImpl.getNextBatch(CSFileEAIteratorImpl.java:590)

at com.interwoven.cssdk.filesys.impl.CSFileEAIteratorImpl.<init>(CSFileEAIteratorImpl.java:258)

at com.interwoven.cssdk.filesys.impl.CSDirImpl.getFiles(CSDirImpl.java:165)

at com.interwoven.ui.teamsite.filesys.query.FSQuery.executeQuery(FSQuery.java:555)

at com.interwoven.ui.teamsite.filesys.GetDirectoryContentsCommand.getFilesIterator(GetDirectoryContentsCommand.java:210)

at com.interwoven.ui.teamsite.filesys.GetDirectoryContentsCommand.getFilesIterator(GetDirectoryContentsCommand.java:150)

at com.interwoven.ui.teamsite.filesys.AbstractDirectoryListCommand.execute(AbstractDirectoryListCommand.java:183)

at com.interwoven.ui.teamsite.ccpro.filesys.ListDirectoryCommand.execute(ListDirectoryCommand.java:83)

at com.interwoven.ui.base.impl.command.CommandHandler.doExecuteCommand(CommandHandler.java:1041)

at com.interwoven.ui.base.impl.command.CommandHandler.tryRunCommandDescriptor(CommandHandler.java:864)

at com.interwoven.ui.base.impl.command.CommandHandler.tryRunCommandID(CommandHandler.java:738)

at com.interwoven.ui.base.impl.command.CommandHandler.runCommandLoop(CommandHandler.java:330)

at com.interwoven.ui.base.impl.command.CommandServlet.doGet(CommandServlet.java:163)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:690)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at com.interwoven.livesite.spring.hibernate.web.filter.OpenSessionsInViewFilter.doFilterInternal(OpenSessionsInViewFilter.java:108)

at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)

at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)

at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at com.interwoven.ui.base.impl.auth.AuthenticationFilter.doFilter(AuthenticationFilter.java:203)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at com.interwoven.ui.base.util.SetRequestEncodingFilter.doFilter(SetRequestEncodingFilter.java:106)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)

at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:182)

at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)

at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262)

at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)

at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:584)

at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)

at java.lang.Thread.run(Thread.java:662)

Find more posts tagged with

Comments

Do I need to use the iwidimap from the source server?

My iwidap process was

1. Extract the map from the target server

2. Update all IDs to user names / group names

3. Import the idmap back on the target server

As a master, go in and view the permissions of the workarea itself and then the objects under the workarea

Can you create a new workarea on that branch and see if a user can access ?

Tried that too .. same issue

What are the permissions, owner, group, of the branch/workarea and files underneath ?

Owner is the same as the source store [unless you are asking me for the name]

Group for sharing is a TSGroup which i created and added.

The owner & perms on the files and folders are messed up but i was atleast expecting to get into the Workarea to create some files/folders atleast

I have the same issue when i try to access the migrated workarea via windows file system [Y Drive]

OK, and I assume the user you are trying is a member of that TS group.

Roles are specific to the branch. Have you confirmed that user/group has a role on that branch ? Easiest to view the branch and the go to configuration/Users-Roles

And check iw.cfg, do you have workarea security or branch security turned on ? I assue the WA is NOT marked as private.

Branch/WA security is on but i have the same problem even if I turn them off

and the WA is not private .. i checked with iwaccess CLT as well.

Do I have to use the iwidmap from the source server?

rupinder555 wrote:
Do I have to use the iwidmap from the source server?

Should not need to do that. What about the roles ?

I have the group setup as Editor role.

its a TS group with all the users in it

com.interwoven.cssdk.access.CSAuthorizationException: //WIISMAB00035Q55/default/main/DotCom/WORKAREA/temp/.(Permission denied)

Curious. This implies that you have access to "temp" (the CSWorkarea) but not temp/. (the CSDir obtained via workarea.getRootDir())... use the iwaccess CLT to diagnose that path, checking windows-permissions and windows-inheritance in particular.

Found the problem,

1. The access is an issue for any new users I add

2. The Folders 'WORKAREA/STAGING/EDITIONS' do not have Read and Execute' permission for everyone for me to browse then in the workarea or using Y Drive.

3. If I had these users to the 'teamsite web preview' group I am able to get the listing of WORKAREA

Is there a way to set R+X permissions on these 3 folders or would I have to create the branch again with the right permissions and run iwmigrate?

Thanks!

In the branch properties, uncheck "private: restrict access".

Sometimes the permissions are kinda sticky on windows though, when it comes to inheritance from objects that aren't normal folders. If that checkbox doesn't work and you can't fix the issue with iwaccess, redoing the migration might be needed.

On Unix I would say check your umask, but not for DOS.

If you do end up recreating the branch, use the command line instead of the UI, it gives you more control:

iwmkbr [flags] parent brname comment rooted [ownerid [groupid]]
Create a new branch in a TeamSite archive.
parent vpath of the parent branch of the new branch
brname name of new branch
comment description of new branch
rooted name of edition in parent to root the new branch
ownerid user login name of the owner of new branch
groupid group name of the group which owns the new branch
A vpath is in the following form: [//server]/archive{[/branch]+}
Flags:
-v print version string
-h print this message
-l[ock=]s create branch with submit locking [default]
-l[ock=]o create branch with optional write locking
-l[ock=]m create branch with mandatory write locking