Project

General

Profile

Project activity #34984

open

Tezza RM permissions patch

Added by Bram Geerlings 19 days ago. Updated 5 days ago.

Status:
In Progress
Priority:
P4 Normal
Assignee:
Category:
-
Target version:
Contezza Productontwikkeling - Contezza Development 2025.10
Start date:
03/10/2025
Due date:
% Done:

80%

Estimated time:

Description

Wanneer Alfresco Governance Services een record aanmaakt kijkt het naar de huidige gebruikers met rechten op de node en maakt hiervoor twee groepen:
IPRR-* : Alle gebruikers met toegang tot de node
IPRW-* : Gebruikers met schrijfrechten op de node (meestal beheer rechten).

Dit zorgt voor een groot aantal IPR groepen die hun tol eisen op de database en responsetijden bij searches.

Om het aantal In Place Record groepen binnen Alfresco hanteerbaar te houden willen we de volgende patch ontwikkelen:
Per node wordt er een snapshot gemaakt van groepen en gebruikers die op dat moment rechten hebben op de node. Deze gebruikers worden niet in IPR groepen geplaatst, maar krijgen directe toegang op de record node met bijbehorende rechten:

  • Waar voorheen groepen en/of gebruikers lid werden gemaakt van de IPRR groep van de node worden ze nu op de node gezet met 'Read' permissie.
  • Waar voorheen groepen en/of gebruikers lid werden gemaakt van de IPRW groep van de node worden ze nu op de node gezet met 'Filing' permissie.

Files

clipboard-202510130912-avfhw.png (68.4 KB) clipboard-202510130912-avfhw.png Bram Geerlings, 13/10/2025 09:12 AM
clipboard-202510130923-osb5j.png (117 KB) clipboard-202510130923-osb5j.png Bram Geerlings, 13/10/2025 09:23 AM
clipboard-202510131633-fyzpu.png (17.1 KB) clipboard-202510131633-fyzpu.png Bram Geerlings, 13/10/2025 04:33 PM
clipboard-202510141420-vekix.png (114 KB) clipboard-202510141420-vekix.png Bram Geerlings, 14/10/2025 02:20 PM
Actions #2

Updated by Rick de Rooij 14 days ago

  • Assignee set to Rick de Rooij
Actions #3

Updated by Rick de Rooij 14 days ago

  • Status changed from Backlog to In Progress
  • Target version changed from Tezza Backlog to Contezza Development 2025.10
Actions #5

Updated by Rick de Rooij 13 days ago

Repo: https://git.contezza.nl/develop/alfresco/rm-permissions-patch

Ik heb de basis met test. Lijkt toch moeilijker te zijn. Filing of ReadRecords zijn alleen maar voor IPR groepen. Hoe en waarom dit niet kan is onduidelijk. Het is de vraag hoe ver we willen gaan. Maar het komt erop neer als je groep GROUP_IPR_SOME_NAME aanmaakt en die wordt wel lokaal gezet (locallySet). Doe je groep GROUP_TEST werkt het niet.

Actions #6

Updated by Rick de Rooij 13 days ago

  • Assignee changed from Rick de Rooij to Bram Geerlings
  • % Done changed from 0 to 80

Hi Bram,

Ik heb fix gemaakt. Moest ook FilePlanPermissionServiceImpl overschrijven.

Graag testen en reviewen.

Gr, Rick

Actions #7

Updated by Bram Geerlings 12 days ago

  • Assignee changed from Bram Geerlings to Rick de Rooij

Review akkoord, integratie test succesvol lokaal uitgevoerd en nogmaals handmatig bevestigd.

Actions #8

Updated by Rick de Rooij 12 days ago

  • Assignee changed from Rick de Rooij to Bram Geerlings

Hi Bram,

Module toegevoegd aan Tezza RM (fix/rm_permissions_patch_disable_ipr_groups/#34984).

Gaat mee met volgende deploy naar DEV.

Kun je de flow op Tezza DEV testen (vanaf maandag).

Gr, Rick

Updated by Bram Geerlings 9 days ago

Getest op dev-tezza:

ZAAK-2025-0000000640 gearchiveerd (1 jaar vernietigen). Job voor archiveren handmatig gestart voor het archiveren van documenten, daarna voor het archiveren van de zaak. Resultaat:

Verwachting zou zijn dat er geen IPRW of IPRR groepen op het document staan, en de site_[zaaktype]_[rol] groepen direct op het document terug zijn te vinden met de juiste rollen.

Onderstaande is een screenshot na lokale test met de rechten zoals verwacht:

Actions #10

Updated by Rick de Rooij 8 days ago

  • Assignee changed from Rick de Rooij to Bram Geerlings

De rm patch staat nu wel op DEV. Graag opnieuw testen.

Actions #11

Updated by Bram Geerlings 8 days ago

2025-10-13T16:30:44,675 [] ERROR [api.messaging.MessageListener] [Camel (alfrescoCamelContext) thread #3 - JmsConsumer[nl.contezza.tezza-services]] Updating zaakinformatieobject in ZRC for file 'TESTDOCUMENT VALID SIGN Test (2025-1760365843749).docx' failed.
2025-10-13T16:30:45,657 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] update zaak: ZAAK-2025-0000000638.
2025-10-13T16:30:45,712 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] relevanteAndereZaken length: 0
2025-10-13T16:30:45,717 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [updateLinks] tza:links successfully updated for folder: ZAAK-2025-0000000638
2025-10-13T16:30:45,717 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [update] relevanteAndereZaken successfully updated in tza:links.
2025-10-13T16:30:45,779 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] update zaak: ZAAK-2025-0000000637.
2025-10-13T16:30:45,807 [] ERROR [zrc.service.ZaakinformatieobjectenService] [Camel (alfrescoCamelContext) thread #3 - JmsConsumer[nl.contezza.tezza-services]] nl.vngrealisatie.zrc.ApiException: Bad Request
2025-10-13T16:30:45,808 [] ERROR [api.messaging.MessageListener] [Camel (alfrescoCamelContext) thread #3 - JmsConsumer[nl.contezza.tezza-services]] Updating zaakinformatieobject in ZRC for file 'TESTDOCUMENT VALID SIGN Test (2025-1760365844947).docx' failed.
2025-10-13T16:30:45,827 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] relevanteAndereZaken length: 0
2025-10-13T16:30:45,830 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [updateLinks] tza:links successfully updated for folder: ZAAK-2025-0000000637
2025-10-13T16:30:45,830 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [update] relevanteAndereZaken successfully updated in tza:links.

Documenten worden niet langer gearchiveerd in OpenZaak. Getest op dev-tezza met twee zaken ZAAK-2025-0000000637, ZAAK-2025-0000000638:

Actions #12

Updated by Bram Geerlings 8 days ago

  • Assignee changed from Bram Geerlings to Rick de Rooij
Actions #13

Updated by Bram Geerlings 7 days ago

    2025-10-14 14:10:31.686 | 2025-10-14T14:10:31,683 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Executing action: nl.contezza.rm.action.ArchiveFolderActionExecuter
2025-10-14 14:10:47.570 | 2025-10-14T14:10:47,567 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Record Category Name: Bestemmingsplan opstellen
2025-10-14 14:11:00.609 | 2025-10-14T14:11:00,604 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Record Category Name: 2025
2025-10-14 14:11:12.452 | 2025-10-14T14:11:12,448 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Record Category Name: 5 JAAR VERNIETIGEN
2025-10-14 14:11:30.642 | 2025-10-14T14:11:30,637 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] RecordFolder: ZAAK-2025-0000000008 (workspace://SpacesStore/f430c8b6-079b-4361-b0c8-b6079bf3616a)
2025-10-14 14:11:38.867 | 2025-10-14T14:11:38,864 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Archiving 1 files.
2025-10-14 14:11:42.683 | 2025-10-14T14:11:42,680 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9]  > Create record for file: TESTDOCUMENT VALID SIGN Test.docx
2025-10-14 14:12:00.987 | 2025-10-14T14:12:00,985 [] DEBUG [rm.permissions.ContezzaExtendedSecurityService] [http-nio-8080-exec-9] === ContezzaExtendedSecurityService.set() ===
2025-10-14 14:12:00.992 | 2025-10-14T14:12:00,988 [] DEBUG [rm.permissions.ContezzaExtendedSecurityService] [http-nio-8080-exec-9] Readers to assign: [GROUP_site_ZTBestemmingsplanopstellen_SiteManager, GROUP_site_ZTBestemmingsplanopstellen_SiteContributor, GROUP_site_ZTBestemmingsplanopstellen_SiteCollaborator, GROUP_site_ZTBestemmingsplanopstellen_SiteConsumer]
2025-10-14 14:12:00.996 | 2025-10-14T14:12:00,993 [] DEBUG [rm.permissions.ContezzaExtendedSecurityService] [http-nio-8080-exec-9] Writers to assign: [GROUP_site_ZTBestemmingsplanopstellen_SiteManager, GROUP_site_ZTBestemmingsplanopstellen_SiteCollaborator, admin]
2025-10-14 14:12:17.838 | 2025-10-14T14:12:17,836 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9]  > File to action: TESTDOCUMENT VALID SIGN Test.docx
2025-10-14 14:12:20.088 | 2025-10-14T14:12:20,087 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9]  > Declare record for file: TESTDOCUMENT VALID SIGN Test.docx
2025-10-14 14:12:20.614 | 2025-10-14T14:12:20,613 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Copy properties from folder: ZAAK-2025-0000000008
2025-10-14 14:12:21.037 | 2025-10-14T14:12:21,037 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Done.
2025-10-14 14:12:21.046 | 2025-10-14T14:12:21,045 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.074 | 2025-10-14T14:12:21,074 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.090 | 2025-10-14T14:12:21,089 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.184 | 2025-10-14T14:12:21,184 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.289 | 2025-10-14T14:12:21,279 [] ERROR [extensions.webscripts.AbstractRuntime] [http-nio-8080-exec-9] Exception from executeScript: 09140084 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnMoveNodePolicy.onMoveNode(org.alfresco.service.cmr.repository.ChildAssociationRef,org.alfresco.service.cmr.repository.ChildAssociationRef) in transaction 2842991e-303e-46ed-8299-1e303ec6ed54 : null(Cannot invoke "org.alfresco.service.cmr.security.PermissionService.getInheritParentPermissions(org.alfresco.service.cmr.repository.NodeRef)" because "this.this$0.permissionService" is null)
2025-10-14 14:12:21.289 | org.alfresco.error.AlfrescoRuntimeException: 09140084 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnMoveNodePolicy.onMoveNode(org.alfresco.service.cmr.repository.ChildAssociationRef,org.alfresco.service.cmr.repository.ChildAssociationRef) in transaction 2842991e-303e-46ed-8299-1e303ec6ed54 : null(Cannot invoke "org.alfresco.service.cmr.security.PermissionService.getInheritParentPermissions(org.alfresco.service.cmr.repository.NodeRef)" because "this.this$0.permissionService" is null)
2025-10-14 14:12:21.289 |     at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:263) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.289 |     at org.alfresco.repo.policy.TransactionBehaviourQueue.beforeCommit(TransactionBehaviourQueue.java:141) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.util.transaction.TransactionSupportUtil$TransactionSynchronizationImpl.doBeforeCommit(TransactionSupportUtil.java:536) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.util.transaction.TransactionSupportUtil$TransactionSynchronizationImpl.doBeforeCommit(TransactionSupportUtil.java:516) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.util.transaction.TransactionSupportUtil$TransactionSynchronizationImpl.beforeCommit(TransactionSupportUtil.java:481) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.support.TransactionSynchronizationUtils.triggerBeforeCommit(TransactionSynchronizationUtils.java:97) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.support.AbstractPlatformTransactionManager.triggerBeforeCommit(AbstractPlatformTransactionManager.java:986) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:775) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:758) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:663) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.alfresco.util.transaction.SpringAwareUserTransaction.commit(SpringAwareUserTransaction.java:507) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:474) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:340) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.runWithTransactionIfNeeded(ExecuteWebscript.java:353) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 |     at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.lambda$runScriptWithTransactionAndAuthentication$0(ExecuteWebscript.java:326) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:602) ~[alfresco-data-model-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.runScriptWithTransactionAndAuthentication(ExecuteWebscript.java:326) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 |     at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.execute(ExecuteWebscript.java:170) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:506) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:685) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:721) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.executeScriptInternal(RepositoryContainer.java:413) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:309) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:423) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 |     at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:210) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 |     at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:131) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.AlfrescoWebScriptServlet.service(AlfrescoWebScriptServlet.java:43) [alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:658) [servlet-api.jar:6.0]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:195) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51) [tomcat-websocket.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.alfresco.module.aosmodule.service.ContextRootFilter.doFilter(ContextRootFilter.java:93) [alfresco-aos-repo-binding-3.2.0.jar:?]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.springframework.extensions.webscripts.servlet.SecurityHeadersFilter.doFilter(SecurityHeadersFilter.java:177) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:68) [alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.alfresco.web.app.servlet.ClearSecurityContextFilter.doFilter(ClearSecurityContextFilter.java:53) [alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:167) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:483) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:116) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:732) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:666) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:344) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:398) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:903) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1769) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1189) [tomcat-util.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:658) [tomcat-util.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63) [tomcat-util.jar:10.1.42]
2025-10-14 14:12:21.290 |     at java.base/java.lang.Thread.run(Thread.java:840) [?:?]
2025-10-14 14:12:21.290 | Caused by: java.lang.NullPointerException: Cannot invoke "org.alfresco.service.cmr.security.PermissionService.getInheritParentPermissions(org.alfresco.service.cmr.repository.NodeRef)" because "this.this$0.permissionService" is null
2025-10-14 14:12:21.290 |     at org.alfresco.module.org_alfresco_module_rm.security.FilePlanPermissionServiceImpl$6.doWork(FilePlanPermissionServiceImpl.java:557) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.module.org_alfresco_module_rm.security.FilePlanPermissionServiceImpl$6.doWork(FilePlanPermissionServiceImpl.java:550) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:602) ~[alfresco-data-model-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.module.org_alfresco_module_rm.util.AuthenticationUtil.runAs(AuthenticationUtil.java:64) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.module.org_alfresco_module_rm.security.FilePlanPermissionServiceImpl.onMoveRecord(FilePlanPermissionServiceImpl.java:549) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 |     at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/java.lang.reflect.Method.invoke(Method.java:568) ~[?:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.policy.JavaBehaviour$JavaMethodInvocationHandler.invoke(JavaBehaviour.java:181) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at jdk.proxy3/jdk.proxy3.$Proxy234.onMoveNode(Unknown Source) ~[?:?]
2025-10-14 14:12:21.290 |     at jdk.internal.reflect.GeneratedMethodAccessor987.invoke(Unknown Source) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/java.lang.reflect.Method.invoke(Method.java:568) ~[?:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:250) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     ... 62 more

De logging geeft aan dat PermissionService in FilePlanPermissionService null is, dit wordt onderschreven in debug:

Actions #15

Updated by Rick de Rooij 5 days ago

  • Assignee changed from Rick de Rooij to Tahir Malik

Tahir. Kun je valideren of de patch nu goed werkt. Je kunt wat tests doen op DEV.

Gr, Rick

Also available in: Atom PDF