Staff only have Read permission in Shared Areas

[agibson]

Hi

 

Staff don't seem to be able to manually write back to shared areas (staff shared and student shared), even though they do have the NTFS permissions to do so on the LAN.

 

When looking at one particular user (who can write to the folder via windows), their permissions are ALL coming back as false, even read - however I can directedit and open/download files.

 

The JSON debugging comes back with

[{"Actions":0,"CreationTime":"13\/09\/2013 10:08","Description":null,"Extension":"","Icon":". .\/images\/icons\/folder.png","ModifiedTime":"12\/12\/2013 10:54","Name":"Level 1 Syl","Path":"T\\Staff Resources\\ECDL\\ECDL Oct 2013 starters\\Level 1 Syl","Permissions":{"AppendData":false,"CreateDirs ":false,"CreateFiles":false,"Delete":false,"Delete SubDirsOrFiles":false,"Execute":false,"FullControl ":false,"ListDirs":false,"Modify":false,"ReadAttr" :false,"ReadData":false,"ReadExAttr":false,"ReadEx ecute":false,"Traverse":false,"Write":false,"Write Attr":false,"WriteData":false,"WriteExAttr":false} ,"Size":"","Type":"Directory"},{"Actions":0,"Creat ionTime":"05\/11\/2013 11:31","Description":null,"Extension":"","Icon":". .\/images\/icons\/folder.png","ModifiedTime":"11\/02\/2014 09:51","Name":"Level 2 Syl","Path":"T\\Staff Resources\\ECDL\\ECDL Oct 2013 starters\\Level 2 Syl","Permissions":{"AppendData":false,"CreateDirs ":false,"CreateFiles":false,"Delete":false,"Delete SubDirsOrFiles":false,"Execute":false,"FullControl ":false,"ListDirs":false,"Modify":false,"ReadAttr" :false,"ReadData":false,"ReadExAttr":false,"ReadEx ecute":false,"Traverse":false,"Write":false,"Write Attr":false,"WriteData":false,"WriteExAttr":false} ,"Size":"","Type":"Directory"}]

 

Please help!!!

[nickbro]

Hmm, that is odd. Can you check the api /hap/api/ad/roles/%user% to see what roles HAP+ thinks you should have.

 

Sorry for the delay in responding, got a lot of work on at the moment at school

[ragbuster]

I have the same problem even though the user is assigned a group which should give write access. Log below:

{"Actions":0,"Contents":null,"DateAccessed":null,"DateCreated":null,"DateModified":null,"Extension":null,"Icon":"..\/images\/icons\/folder.png","Location":"W\\Staff Room\\test","Name":"test","Permissions":{"AppendData":false,"CreateDirs":false,"CreateFiles":false,"Delete":false,"DeleteSubDirsOrFiles":false,"Execute":false,"FullControl":false,"ListDirs":true,"Modify":false,"ReadAttr":true,"ReadData":true,"ReadExAttr":true,"ReadExecute":false,"Traverse":false,"Write":false,"WriteAttr":false,"WriteData":false,"WriteExAttr":false},"Size":null,"Type":"File Folder"}

 

As you can see this is reporting no write access.

As we are an RM site I changed the permission of the RM Staff usertype to allow write access and it worked but this user is a member of a different security group which I want it to read permissions from.

It looks like the issue is HAP is not seeing the security permissions on the other group. Do we need to add additional OU's for HAP to check them?

[nickbro]

Make sure you are using the correct AD names in the hapConfig for that user, it may be the 2000 AD name not the new version

[ragbuster]

Hi Nick,

 

Can you explain more what I need to look for?