Return-Path: X-Original-To: apmail-chemistry-dev-archive@www.apache.org Delivered-To: apmail-chemistry-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id DF3A0797C for ; Wed, 9 Nov 2011 17:18:36 +0000 (UTC) Received: (qmail 57202 invoked by uid 500); 9 Nov 2011 17:18:36 -0000 Delivered-To: apmail-chemistry-dev-archive@chemistry.apache.org Received: (qmail 57165 invoked by uid 500); 9 Nov 2011 17:18:36 -0000 Mailing-List: contact dev-help@chemistry.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@chemistry.apache.org Delivered-To: mailing list dev@chemistry.apache.org Received: (qmail 57157 invoked by uid 99); 9 Nov 2011 17:18:36 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Nov 2011 17:18:36 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of slaurice@opentext.com designates 149.235.128.48 as permitted sender) Received: from [149.235.128.48] (HELO mucmx01.ixos.de) (149.235.128.48) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Nov 2011 17:18:30 +0000 Received: from mucpm02.smtp.dmz.opentext.com (localhost [127.0.0.1]) by mucmx01.ixos.de (8.12.10+Sun/8.12.10) with ESMTP id pA9HI7ei007115 for ; Wed, 9 Nov 2011 18:18:07 +0100 (MET) Received: from MUCXGC2.opentext.net (mucxg04.opentext.net [149.235.128.138]) by mucpm02.smtp.dmz.opentext.com (8.14.4/8.14.4) with ESMTP id pA9HI6vq015995 for ; Wed, 9 Nov 2011 12:18:06 -0500 (envelope-from slaurice@opentext.com) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: Workbench and ACLs Date: Wed, 9 Nov 2011 18:18:05 +0100 Message-ID: <2666EB2A846BAC4BB2D7F593301A7868074C9B0E@MUCXGC2.opentext.net> In-Reply-To: <4EBA9ABC.8020303@alfresco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Workbench and ACLs Thread-Index: Acye86hdow53BjxiRnO1sw/JLt5gOwADahyQ References: <2666EB2A846BAC4BB2D7F593301A7868074C9AB2@MUCXGC2.opentext.net> <4EBA9ABC.8020303@alfresco.com> From: "Stefano Lauricella" To: X-Archived: msg.BregaWr:2011-11-09:mucpm02.smtp.dmz.opentext.com Hi Florian, this worked of course, thank you! However at this point no ACLs are shown at all even where it could be. An error handling similar to the one I mentioned before wouldn't be bad = though. Thanks, Stefano -----Original Message----- From: Florian M=FCller [mailto:florian.mueller@alfresco.com]=20 Sent: Mittwoch, 9. November 2011 16:23 To: dev@chemistry.apache.org Cc: Stefano Lauricella Subject: Re: Workbench and ACLs Hi Stefano, Go the Expert tab in the Login dialog and add this line: cmis.workbench.object.includeAcls=3Dfalse -Florian On 09/11/2011 06:08, Stefano Lauricella wrote: > Hi team, > > I have a question about the Workbench. > > I'm experiencing a problem whenever I perform a login using a user,=20 > who has no rights to see and modify permissions. It looks like the=20 > Workbench performs an extra getObject call with the includeAcls=3Dtrue = > argument to retrieve the object permissions and fill the ACL pane on=20 > the right. At this point our CMIS implementation throws a=20 > PERMISSION_DENIED error according to the chapter 2.2.1.2.5 of the=20 > specification (see "... MUST return the ACLs ..." in the image below)=20 > since the user is not allowed to see permissions on the required = object. > > Unfortunately the Workbench shows the error received with an error=20 > dialog and gives up working further. All buttons are grayed out and=20 > the GUI becomes unuseful. > > See error for WS ... > > Description: cid:image003.png@01CC9ECA.4F14B000 > > ... and for Atompub. > > I would expect the Workbench to catch such a PERMISSION_DENIED error,=20 > leave the correspondent ACLs pane empty but keep on working with=20 > further objects. > > Is that a known issue? Is there any fix for that (I'm using the 0.5.0=20 > version)? > > Or am I missing something? > > Thanks for any hint you might have. > > - Stefano > > ---------------------------------------------------------------------- > -- > > /"Not everything that counts can be counted, and not everything that=20 > can be counted counts." - //Albert Einstein/// > > /"Non tutto quel che pu=F2 essere contato, conta, e non tutto quel che = > conta, pu=F2 essere contato."/// > > /"Nicht alles, was man z=E4hlen kann, z=E4hlt auch. Und nicht alles, = was=20 > z=E4hlt, kann man auch z=E4hlen." / > > //// > > *Stefano Lauricella* > > Development Enterprise Library Infrastructure > > Description: cid:image002.gif@01CB6143.E5EC8FE0 > > > ** > > *Open Text Software**GmbH* > > =09 > > =09 > > Description: > http://www.opentext.com/2/emailsupport-event-image-opentext.gif > > > Technopark II > > Werner-von-Siemens-Ring 20 > > 85630 Grasbrunn > > Germany > > Phone: +49 (0) 89 4629 1860 > > Fax: +49 (0) 89 4629 33 1860 > > =09 > > Email: > > =09 > > stefano.lauricella@opentext.com=20 > > > Web site: > > =09 > > http://www.opentext.com/ > > =09 > > > *Place of Incorporation / Sitz der Gesellschaft: *Open Text Software=20 > GmbH, Werner-von-Siemens-Ring 20, 85630 Grasbrunn, Germany | Phone:=20 > +49 > (0) 89 4629 0 | Fax: +49 (0) 89 4629 1199 | *Register Court / > Registergericht: *M=FCnchen, Germany | *Trade Register Number / HRB: > *179298 | *VAT ID Number /USt-ID: *118 656 356*| Managing Director / > Gesch=E4ftsf=FChrer: *Walter K=F6hler > > This email is protected by domestic and international copyright laws=20 > and treaties and is the property of Open Text Corporation, it may=20 > contain confidential and/or trade secret information of the Open Text=20 > Corporation and/or its subsidiaries (OTC), and may be subject to legal = > privilege in favor of OTC. This email may only be lawfully received,=20 > accessed, displayed on a computer screen, printed, copied, and/or used = > by the specific addressee(s) named above ("Authorized Recipient") for=20 > the purpose for which it was sent by OTC. All other rights and=20 > licenses to this email are fully reserved to OTC. If you are not an=20 > Authorized Recipient, you are required to immediately delete this=20 > email in its entirety without printing, copying, using, and/or=20 > re-transmitting this email, either in whole or in part. The=20 > transmission of this email by OTC is not to be construed as a waiver=20 > by OTC and/or the individual sending this email on behalf of OTC of=20 > any of their respective rights or privileges at law or otherwise, = howsoever arising. >