New Folder, Upload etc. missing for non-admins

[JackCPickup]

Hi there,

 

Having an issue with a few installs of the latest HAP+.

 

For non-admin users, the New Folder, Upload etc. buttons appear for a split second but are then hidden. Looking at it with Firebug I get that they're hidden when not to be used, but have no idea why they're being hidden when I should be able to use them.

 

Server is Windows Server 2008 R2 with IIS7, happens in all browsers, and like I say it's only for non-admin users.

 

Thanks for any help.

[nickbro]

You will need to check your NTFS permissons. Have you set the enablewriteto="All" in the hapConfig.xml. HAP+ uses NTFS permissions as well as some of it's own

[JackCPickup]

Got it, had to explicitly give pupils and teachers NTFS permissions on the shares, 'everyone' wasn't working. Cheers, Nick.

[nickbro]

Ah, the everyone group, forgot all users need to be in that group.

 

I use authenticated users, as everyone includes unauthenticated

Edited September 18, 2014 by nickbro

[Harry_Greatorex]

We use groups for permissions, but it still isn't working.

[nickbro]

Check /hap/api/ad/roles/%username% to check HAP is getting the AD groups correctly.

 

You can also do some http://www.edugeek.net/forums/home-access-plus/86059-hap-json-debugging.html to find out if HAP+ is reporting the correct permissions back to the browser

[Harry_Greatorex]

Hi Nick,

 

Thank you for the tips. When i check AD groups from your first suggestion all i get is a jumble of words, not sure if this is right?

 

{"FirstName":null,"SiteName":null,"Token1":null,"Token2":"System.DirectoryServices.DirectoryServicesCOMException (0x8007052E): The user name or password is incorrect.\u000d\u000a\u000d\u000a   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)\u000d\u000a   at System.DirectoryServices.DirectoryEntry.Bind()\u000d\u000a   at System.DirectoryServices.DirectoryEntry.get_AdsObject()\u000d\u000a   at System.DirectoryServices.PropertyValueCollection.PopulateList()\u000d\u000a   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)\u000d\u000a   at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)\u000d\u000a   at System.DirectoryServices.AccountManagement.PrincipalContext.DoLDAPDirectoryInitNoContainer()\u000d\u000a   at System.DirectoryServices.AccountManagement.PrincipalContext.DoDomainInit()\u000d\u000a   at System.DirectoryServices.AccountManagement.PrincipalContext.Initialize()\u000d\u000a   at System.DirectoryServices.AccountManagement.PrincipalContext.get_QueryCtx()\u000d\u000a   at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithTypeHelper(PrincipalContext context, Type principalType, Nullable`1 identityType, String identityValue, DateTime refDate)\u000d\u000a   at System.DirectoryServices.AccountManagement.UserPrincipal.FindByIdentity(PrincipalContext context, String identityValue)\u000d\u000a   at HAP.AD.User.get_UserP()\u000d\u000a   at HAP.AD.User.Authenticate(String username, String password)\u000d\u000a   at HAP.AD.API.UserGET(String username, String password)","Token2Name":null,"Username":null,"isValid":false}

 

When i do the JSON debugging, when i access the shared drive that isnt allowing uploading, i get this below...

 

[{"Actions":0,"CreationTime":"10\/12\/2014 08:08","Description":null,"Extension":"","Icon":"..\/images\/icons\/folder.png","ModifiedTime":"22\/10\/2015 08:38","Name":"Admin","Path":"W\\Admin","Permissions":{"AppendData":false,"CreateDirs":false,"CreateFiles":false,"Delete":true,"DeleteSubDirsOrFiles":true,"Execute":true,"FullControl":true,"ListDirs":true,"Modify":true,"ReadAttr":true,"ReadData":true,"ReadExAttr":true,"ReadExecute":true,"Traverse":true,"Write":true,"WriteAttr":true,"WriteData":false,"WriteExAttr":true},"Size":"","Type":"Directory"},{"Actions":1,"CreationTime":"10\/12\/2014 08:08","Description":null,"Extension":"","Icon":"..\/images\/icons\/folder.png","ModifiedTime":"11\/09\/2015 01:06","Name":"Curriculum","Path":"W\\Curriculum","Permissions":{"AppendData":false,"CreateDirs":false,"CreateFiles":false,"Delete":true,"DeleteSubDirsOrFiles":true,"Execute":true,"FullControl":true,"ListDirs":true,"Modify":true,"ReadAttr":true,"ReadData":true,"ReadExAttr":true,"ReadExecute":true,"Traverse":true,"Write":true,"WriteAttr":true,"WriteData":false,"WriteExAttr":true},"Size":"","Type":"Directory"},{"Actions":0,"CreationTime":"12\/12\/2014 09:41","Description":null,"Extension":"","Icon":"..\/images\/icons\/folder.png","ModifiedTime":"22\/10\/2015 08:38","Name":"Extra Curricular","Path":"W\\Extra Curricular","Permissions":{"AppendData":false,"CreateDirs":false,"CreateFiles":false,"Delete":true,"DeleteSubDirsOrFiles":true,"Execute":true,"FullControl":true,"ListDirs":true,"Modify":true,"ReadAttr":true,"ReadData":true,"ReadExAttr":true,"ReadExecute":true,"Traverse":true,"Write":true,"WriteAttr":true,"WriteData":false,"WriteExAttr":true},"Size":"","Type":"Directory"},{"Actions":0,"CreationTime":"10\/12\/2014 08:08","Description":null,"Extension":"","Icon":"..\/images\/icons\/folder.png","ModifiedTime":"22\/10\/2015 08:38","Name":"Pastoral","Path":"W\\Pastoral","Permissions":{"AppendData":false,"CreateDirs":false,"CreateFiles":false,"Delete":true,"DeleteSubDirsOrFiles":true,"Execute":true,"FullControl":true,"ListDirs":true,"Modify":true,"ReadAttr":true,"ReadData":true,"ReadExAttr":true,"ReadExecute":true,"Traverse":true,"Write":true,"WriteAttr":true,"WriteData":false,"WriteExAttr":true},"Size":"","Type":"Directory"},{"Actions":0,"CreationTime":"11\/12\/2014 07:52","Description":null,"Extension":"","Icon":"..\/images\/icons\/folder.png","ModifiedTime":"22\/10\/2015 08:38","Name":"Quality Assurance","Path":"W\\Quality Assurance","Permissions":{"AppendData":false,"CreateDirs":false,"CreateFiles":false,"Delete":true,"DeleteSubDirsOrFiles":true,"Execute":true,"FullControl":true,"ListDirs":true,"Modify":true,"ReadAttr":true,"ReadData":true,"ReadExAttr":true,"ReadExecute":true,"Traverse":true,"Write":true,"WriteAttr":true,"WriteData":false,"WriteExAttr":true},"Size":"","Type":"Directory"},{"Actions":0,"CreationTime":"10\/12\/2014 08:13","Description":null,"Extension":"","Icon":"..\/images\/icons\/folder.png","ModifiedTime":"22\/10\/2015 08:38","Name":"Teaching & Learning","Path":"W\\Teaching |26 Learning","Permissions":{"AppendData":false,"CreateDirs":false,"CreateFiles":false,"Delete":true,"DeleteSubDirsOrFiles":true,"Execute":true,"FullControl":true,"ListDirs":true,"Modify":true,"ReadAttr":true,"ReadData":true,"ReadExAttr":true,"ReadExecute":true,"Traverse":true,"Write":true,"WriteAttr":true,"WriteData":false,"WriteExAttr":true},"Size":"","Type":"Directory"},{"Actions":0,"CreationTime":"10\/12\/2014 10:42","Description":null,"Extension":".docx","Icon":"..\/images\/icons\/doc.png","ModifiedTime":"10\/12\/2014 03:11","Name":"New Staff drive Instructions","Path":"..\/Download\/W\/New Staff drive Instructions.docx","Permissions":{"AppendData":false,"CreateDirs":false,"CreateFiles":false,"Delete":true,"DeleteSubDirsOrFiles":true,"Execute":true,"FullControl":true,"ListDirs":true,"Modify":true,"ReadAttr":true,"ReadData":true,"ReadExAttr":true,"ReadExecute":true,"Traverse":true,"Write":true,"WriteAttr":true,"WriteData":false,"WriteExAttr":true},"Size":"566.75 KB","Type":"Microsoft Word Document"}]

 

Some of that suggests permissions aren't right?

 

Kind Regards

Harry

[nickbro]

Did you change %username% for one of the users you are testing?

[Harry_Greatorex]

Yes i did.

[nickbro]

Ok, it's coming up with an error that the admin password is wrong

[Harry_Greatorex]

Interesting, i have just gone into the HAP AD config and it has a cross. I have retyped the administrator password but it still comes up with the cross. I have attache a screenshot.

 

Harry

 

[JackCPickup]

Strange, all of my schools' HAP has the red cross but they all work!

[Harry_Greatorex]

Everyone can log in fine, and access home drives. Just not the shared drives. I've tried both domain\administrator and just administrator for the username but it doesn't make a difference.

[Harry_Greatorex]

Any other ideas?

 

Thanks.

[nickbro]

The username should just be administrator. If HAP+ is working you can ignore the AD Cross, it's there for initial setup. The password isn't rendered out after a reload for security purposes.

 

If the shared areas aren't working that points more to a NTFS delegation issue, are you using DFS or FQDN?

[Harry_Greatorex]

I am using FQDN in HAP+ drive config. We are still having problems and now more staff are starting to notice.

[Harry_Greatorex]

Just had a look at our permissions, and we have the top level folders as read only, however subject folders have write access (special permissions), could this be why it isn't working?