Giving a group access to logon tracker?

[reggiep]

Hi,
I have created a group and given them the link to the logon tracker on their resources on the HAP homepage.
They can click on that but then they get a denied access message.
From my earlier tinkerings I guess I need to grant access somewhere in the web.config?
Would that be right and if so where?

Thanks

[nickbro]

Yep, that's it, ~/tracker/web.config

[reggiep]

Nope, I'm still being an idiot.
I have tried editing wwwroot\HAP\Tracker\web.config file to give access to the group like this...

<configuration>
<system.web>
<authorization>
<allow roles="Domain Admins" />
<allow roles="GRP_HAP_ACCESS_LOGINS" /> <------------------my added line
<deny users="*" />
</authorization>
</system.web>
<location path="api.asmx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>
</configuration>

or editing the main web.config which usually ends in me being unable to access AHP at all!

Could you let me know what I'm doing wrong?

Thanks

[nickbro]

Hmm, that's odd it should work

[reggiep]

So i'm in the right area Nick?

[reggiep]

Hmm, after your reply I went and tried to change it to

<configuration>
<system.web>
<authorization>
<allow roles="Students" />
<deny users="*" />
</authorization>
</system.web>
<location path="api.asmx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>
</configuration>

and then a user in the students group could access it.
I have checked my group spelling and that was correct. Does Hap need to know about any groups that I recently created anywhere maybe?

[reggiep]

Got it, don't know how but I tried with my original group again and it worked!

Thanks for the help again Nick

[nickbro]

Good to hear, it could of been an AD Replication Delay Issue