I'm seeing something very similar here with CIFS and 3.4b out of the box, no customization... either in a User Home, or a newly-created Share site, I can open a .doc/.xls/.txt file directly, but trying to save gets me a AccessDeniedException: 10110004.... dont' quite see how this is truly a permissions problem, but will do some more digging.

No success so far. It is, for all intents and purposes, unusable to edit files in-place using CIFS. My _hope_ is that there is some new security setting or something we are not aware of, but... I think that is a stretch.

Yes, this is definitely a bug. I found these bugs that relate:

http://issues.alfresco.com/jira/browse/ALF-4526
http://issues.alfresco.com/jira/browse/ALF-3188 ** can't actually see this bug, but allegedly it is the original bug from above **

We are having the very same issue with an out of the box installation of 3.4b on a Ubuntu 10.04 System. Downgrading to 3.4a fixes the issue.

What if you try adding to alfresco-global.properties
filesystem.acl.global.defaultAccessLevel=Write

and for a particular user, try

filesystem.acl.global.userAccessControls=peter
filesystem.acl.global.userAccessControls.value.peter.accessType=Write

At first I thought this helped, but might be worth trying for others.
The reason I thought it worked was that I tested applying this, and upon restart did test with a plain text document. This works fine, you can edit and update. But as soon as you try to edit a MS word document (in my case 2003 version), you get access denied. And from there on, nothing works.

It seems like it works if you are coordinator on the space, so that you have full access to everything created in the folder. If I set the user to have Contributor, it gave access denied. Probably because some temp files get created with other user or system, and MS word are unable to read/delete them. Looks like it is not the case if You are Coordinator.

So for CIFS, it looks like you either give users just consumer rights, or full Coordinator rights.

Can someone else test this and confirm?

I can try sometime later today. I also note that there are new builds (dated Nov 15) in the nightly build directory for 3.4b. It is probably too much to hope for such a speedy correction, but... going to try it anyway ;)

There does not seem to be any change in behavior with the Nov15 nightly of 3.4b (linux 32-bit).

I also tried creating a site, made myself a Collaborator, and uploaded a txt file via CIFS.... opened, added some text, and when trying to save, alfresco.log recorded this immediately. No joy.

06:45:06,960 ERROR [org.alfresco.fileserver] org.alfresco.repo.security.permissions.AccessDeniedException: 10160004 Access Denied. You do not have the appropriate permissions to perform this operation.
org.alfresco.repo.security.permissions.AccessDeniedException: 10160004 Access Denied. You do not have the appropriate permissions to perform this operation.
at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:48)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:167)
at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
at $Proxy45.getStoreFreeSpace(Unknown Source)
at org.alfresco.filesys.repo.ContentDiskDriver.getDiskInformation(ContentDiskDriver.java:3972)
at org.alfresco.jlan.smb.server.ProtocolHandler.getDiskInformation(ProtocolHandler.java:157)
at org.alfresco.jlan.smb.server.NTProtocolHandler.procTrans2QueryFileSys(NTProtocolHandler.java:3991)
at org.alfresco.jlan.smb.server.NTProtocolHandler.processTransactionBuffer(NTProtocolHandler.java:1773)
at org.alfresco.jlan.smb.server.NTProtocolHandler.procTransact2(NTProtocolHandler.java:1600)
at org.alfresco.jlan.smb.server.NTProtocolHandler.runProtocol(NTProtocolHandler.java:232)
at org.alfresco.jlan.smb.server.SMBSrvSession.runHandler(SMBSrvSession.java:1366)
at org.alfresco.jlan.smb.server.SMBSrvSession.processPacket(SMBSrvSession.java:1458)
at org.alfresco.jlan.smb.server.nio.NIOCIFSThreadRequest.runRequest(NIOCIFSThreadRequest.java:105)
at org.alfresco.jlan.server.thread.ThreadRequestPool$ThreadWorker.run(ThreadRequestPool.java:153)
at java.lang.Thread.run(Thread.java:619)
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)
at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.alfresco.repo.model.ml.MLContentInterceptor.invoke(MLContentInterceptor.java:125)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
... 19 more

I've tested some more,
If you in Company Home for test purposes create a space, lets call it Test. Give the user you are accessing that folder via CIFS Collaborator rights on the Space. You can do that using Alfresco Explorer or Share Repository.
Now if you create and edit documents, it works.
If you only assign Collaborator on a specific document, it fails with access denied. Collaborator needs to be set on the space, so that temporary files that are created get Collaborator as well.

Also tested to set only Consumer rights on the Space, and Collaborator on a specific document. In that case you can open the document without error, but you cannot actually save the document. I guess that is hard to workaround, since word wants to write temp files, and you do not have those rights.

It is easy to mix Collaborator and Coordinator up, which I did. It is actually Coordinator you need to set.
Coordinator has
(from permissionDefinitions.xml)
Collaborator has




SiteCollaborator has the same permissions as Collaborator. Neither of included permissions (editor and contributor) has delete rights. Delete rights comes by the fact that files you create you are the owner of, and owner have full rights. If it is delete right that is failing I dont know.

Hi,

this issue is made by the Resource Management module. I installed alfresco 3.4b without this module and I don't have any more trouble with cifs.

See the following bug report for information :

https://issues.alfresco.com/jira/browse/ALF-5576

Regards,

I have raised a new issue on this http://issues.alfresco.com/jira/browse/ALF-5760

I did a test on a clean install of alfresco, no RM modules, no addons.
Still the same result, Works if you are Coordinator, if not cifs throws Access Denied.

Hello,

right I didn't saw this bug.
For information I don't have this issue with OpenOffice on Debian.

Regards,

So I tested and found that if I assign Collaborator, CIFS editing files in place _does_ work, but only if I have not installed the Records Management module. If I install RM, and still do the Collaborator assignation, I get the access-denied error...

Hi all,

I've experienced the same issue ... and I saw that's the bug is marked as solved :
https://issues.alfresco.com/jira/browse/ALF-5576
http://issues.alfresco.com/jira/browse/ALF-5760

This isn't clear for me ; this issue is caused by RM module, CIFS or both of them ?

Anyway, is there any chance, for Alfresco 3.4.b users (like me :D ), to get an "individual" patch / fix (or a diff) to apply ourselves to correct the bug ?

Thanks a lot for your help !

Hello,

for the bug ALF-5576 they give a solution in order to solve the issue.

For the bug ALF-5760 they don't give any solution at the moment. It will be available on the next release I guess.

According to me, we just have to wait...

Thanks y'all for the debugging: i've been struggling with this issue for some time on Alfresco Community 3.4c

Seems that this nasty bug has been fixed on 3.4 Enterprise but it sadly still there on Community 3.4c :( I think that this bugs explains also the timeout i've been experiencing when browsing a Alfresco CIFS share and why CIFS browsing hangs for minutes

anyone experiencing it on 3.4c please ?

Thanks