MyFiles Write bug?

[DPenfold]

Hi small bug (could be settings?) where we put a share drive (Student Share) to be viewed by students however I put it as read only yet they can still upload/delete files on this drive when they should not be able to.

 

Any suggestions?

 

      \\students\stushare$

 

We just did a test, student can do the following via HAP+

 

Upload File, no issue (fully uploaded and view able via File Explorer etc.)

Deleting Files (mix results)

-Unable to delete via right clicking file (good!)

-Able to Delete files by pressing 'Delete' on keyboard (Bad! )

Able Create a Folder

Unable to remove (right click or pressing delete)

 

For now we have remove viewing the Student Shared to students

 

Update: I believe this has been resolved, our fault, students didn't have permission on their own accounts (AD wise) but the whole student group had permissions apparently (error we have since corrected )

Edited March 16, 2016 by DPenfold
Update, solved issue

[nickbro]

That is most odd, as this shouldn't happen as it should use NTFS permissions, even if the link appears it shouldn't work as it's impersonating the user on the server, so basically as far as your file server knows it's the user, not HAP+.

 

Are you running the latest HAP+?

 

Have you turned off ReadWriteChecks in the config?

[DPenfold]

Double checked everything again just now (see attached), there was no web config file in the 'MyFiles' Folder, and the latest (unless you brought something out since start of this year?), I will to revert the 'read' back to staff only, we don't want kids finding out they can remove files from the drive.

 

Also on a side note, two quick things;

 

First; Where can I find information about setting up the log on tracking, if it's active it's not tracking and if I have to set up I'm unsure how (is there a video on your youtube that I've missed?)

 

Second; HAP+ has just started rolling out at our school and we're getting positive feedback from staff, so another kudos to you Nick for HAP+

[DPenfold]

Any thoughts on this slight bug or are you still looking into it (when you have the time to)?

[Steve21]

Have you viewed the effective permissions of said student account on the share (ignoring HAP)? You sure you don't have access on it to write normally?

 

And when it writes a file who's the owner set as?

 

Steve

[DPenfold]

Hi Steve,

 

Thanks for the reply sorry it took a little while to reply but just check but the student we were using does have the right settings/groups/permissions etc. on active directory.

 

So I think there is a bug in HAP+, more so the one I've got/set up than the default HAP+ etc. but I can't be sure. It might be worth someone testing on their own version of HAP+ I dread to think if anyone else has this issue and find student removing files they shouldn't etc.

[nickbro]

It shouldn't delete anything they can't. HAP+ basically runs as that user when they are accessing the file shares, we then rely on Windows to do it's job.

[DPenfold]

@nickbro

 

Still looking into this issue, this may come back to being the active directory settings as you mentioned (despite checking them and confirming they had no rights but I think the group may have rights by mistake) once this has been checked I'll test again and I'll let you know.

 

I have another issue, having trouble still with the booking emails I think it maybe set up correctly I'm actually getting errors now on the events log etc.

 

An error occurred in Home Access Plus+

 

 

Page: Booking System JSON API

 

 

System.InvalidOperationException: A recipient must be specified.

at System.Net.Mail.SmtpClient.Send(MailMessage message)

at HAP.BookingSystem.iCalGenerator.GenerateCancel(Booking booking, DateTime date, Boolean emailadmins)

at HAP.BookingSystem.API.RemoveBooking(String Date, JSONBooking booking, String i)

Message:

A recipient must be specified.

Stack Trace:

at System.Net.Mail.SmtpClient.Send(MailMessage message)

at HAP.BookingSystem.iCalGenerator.GenerateCancel(Booking booking, DateTime date, Boolean emailadmins)

at HAP.BookingSystem.API.RemoveBooking(String Date, JSONBooking booking, String i)

 

I have the following under the SMTP Server (in the config)

Enabled: On

Address: IP of replay for out SMTP (tried the local address and the Office 365 SMTP address too)

Port: 587 (tried 25 too)

SSL: On (tried off too)

SMTP User: *Blank* (tried domain admin username, my own, email address/username)

SMTP User: *Blank* (tried passwords for all above mentioned accounts)

From (Name): DPenfold (tried David Penfold and full email address)

From (Email): dpenfold@*school address*

 

Sometimes I see dots move across the top screen when testing it on our test staff account but nothing comes through, some times the dots are fade or too quick and other times nothing happens (besides the actually booking).

 

Any input would be great .