Project activity #34984: Tezza RM permissions patch - Tezza - Contezza Service Portal

Actions

Version list Copy link

Project activity #34984

closed

Tezza RM permissions patch

Added by Bram Geerlings 2 months ago. Updated about 1 month ago.

Status:

Resolved

Priority:

P4 Normal

Assignee:

Category:

-

Target version:

Contezza Productontwikkeling - Contezza Development 2025.10

Start date:

03/10/2025

Due date:

% Done:

100%

Estimated time:

Description

Wanneer Alfresco Governance Services een record aanmaakt kijkt het naar de huidige gebruikers met rechten op de node en maakt hiervoor twee groepen:
IPRR-* : Alle gebruikers met toegang tot de node
IPRW-* : Gebruikers met schrijfrechten op de node (meestal beheer rechten).

Dit zorgt voor een groot aantal IPR groepen die hun tol eisen op de database en responsetijden bij searches.

Om het aantal In Place Record groepen binnen Alfresco hanteerbaar te houden willen we de volgende patch ontwikkelen:
Per node wordt er een snapshot gemaakt van groepen en gebruikers die op dat moment rechten hebben op de node. Deze gebruikers worden niet in IPR groepen geplaatst, maar krijgen directe toegang op de record node met bijbehorende rechten:

Waar voorheen groepen en/of gebruikers lid werden gemaakt van de IPRR groep van de node worden ze nu op de node gezet met 'Read' permissie.
Waar voorheen groepen en/of gebruikers lid werden gemaakt van de IPRW groep van de node worden ze nu op de node gezet met 'Filing' permissie.

Files

Download all files

clipboard-202510130912-avfhw.png (68.4 KB) clipboard-202510130912-avfhw.png		Bram Geerlings, 13/10/2025 09:12 AM
clipboard-202510130923-osb5j.png (117 KB) clipboard-202510130923-osb5j.png		Bram Geerlings, 13/10/2025 09:23 AM
clipboard-202510131633-fyzpu.png (17.1 KB) clipboard-202510131633-fyzpu.png		Bram Geerlings, 13/10/2025 04:33 PM
clipboard-202510141420-vekix.png (114 KB) clipboard-202510141420-vekix.png		Bram Geerlings, 14/10/2025 02:20 PM

Actions

#2

Updated by Rick de Rooij 2 months ago

Assignee set to Rick de Rooij

Actions

#3

Updated by Rick de Rooij 2 months ago

Status changed from Backlog to In Progress
Target version changed from Tezza Backlog to Contezza Development 2025.10

Actions

#4

Updated by Rick de Rooij 2 months ago

Code logica: https://github.com/Alfresco/alfresco-community-repo/blob/master/amps/ags/rm-community/rm-community-repo/source/java/org/alfresco/module/org_alfresco_module_rm/security/ExtendedSecurityServiceImpl.java

Actions

#5

Updated by Rick de Rooij 2 months ago

Repo: https://git.contezza.nl/develop/alfresco/rm-permissions-patch

Ik heb de basis met test. Lijkt toch moeilijker te zijn. Filing of ReadRecords zijn alleen maar voor IPR groepen. Hoe en waarom dit niet kan is onduidelijk. Het is de vraag hoe ver we willen gaan. Maar het komt erop neer als je groep GROUP_IPR_SOME_NAME aanmaakt en die wordt wel lokaal gezet (locallySet). Doe je groep GROUP_TEST werkt het niet.

Actions

#6

Updated by Rick de Rooij 2 months ago

Assignee changed from Rick de Rooij to Bram Geerlings
% Done changed from 0 to 80

Hi Bram,

Ik heb fix gemaakt. Moest ook FilePlanPermissionServiceImpl overschrijven.

Graag testen en reviewen.

Gr, Rick

Actions

#7

Updated by Bram Geerlings 2 months ago

Assignee changed from Bram Geerlings to Rick de Rooij

Review akkoord, integratie test succesvol lokaal uitgevoerd en nogmaals handmatig bevestigd.

Actions

#8

Updated by Rick de Rooij 2 months ago

Assignee changed from Rick de Rooij to Bram Geerlings

Hi Bram,

Module toegevoegd aan Tezza RM (fix/rm_permissions_patch_disable_ipr_groups/#34984).

Gaat mee met volgende deploy naar DEV.

Kun je de flow op Tezza DEV testen (vanaf maandag).

Gr, Rick

Actions

Copy link Download all files

#9

Updated by Bram Geerlings 2 months ago

File clipboard-202510130912-avfhw.png clipboard-202510130912-avfhw.png added
File clipboard-202510130923-osb5j.png clipboard-202510130923-osb5j.png added
Assignee changed from Bram Geerlings to Rick de Rooij

Getest op dev-tezza:

ZAAK-2025-0000000640 gearchiveerd (1 jaar vernietigen). Job voor archiveren handmatig gestart voor het archiveren van documenten, daarna voor het archiveren van de zaak. Resultaat:

Verwachting zou zijn dat er geen IPRW of IPRR groepen op het document staan, en de site_[zaaktype]_[rol] groepen direct op het document terug zijn te vinden met de juiste rollen.

Onderstaande is een screenshot na lokale test met de rechten zoals verwacht:

Actions

#10

Updated by Rick de Rooij 2 months ago

Assignee changed from Rick de Rooij to Bram Geerlings

De rm patch staat nu wel op DEV. Graag opnieuw testen.

Actions

#11

Updated by Bram Geerlings 2 months ago

File clipboard-202510131633-fyzpu.png clipboard-202510131633-fyzpu.png added

2025-10-13T16:30:44,675 [] ERROR [api.messaging.MessageListener] [Camel (alfrescoCamelContext) thread #3 - JmsConsumer[nl.contezza.tezza-services]] Updating zaakinformatieobject in ZRC for file 'TESTDOCUMENT VALID SIGN Test (2025-1760365843749).docx' failed.
2025-10-13T16:30:45,657 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] update zaak: ZAAK-2025-0000000638.
2025-10-13T16:30:45,712 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] relevanteAndereZaken length: 0
2025-10-13T16:30:45,717 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [updateLinks] tza:links successfully updated for folder: ZAAK-2025-0000000638
2025-10-13T16:30:45,717 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [update] relevanteAndereZaken successfully updated in tza:links.
2025-10-13T16:30:45,779 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] update zaak: ZAAK-2025-0000000637.
2025-10-13T16:30:45,807 [] ERROR [zrc.service.ZaakinformatieobjectenService] [Camel (alfrescoCamelContext) thread #3 - JmsConsumer[nl.contezza.tezza-services]] nl.vngrealisatie.zrc.ApiException: Bad Request
2025-10-13T16:30:45,808 [] ERROR [api.messaging.MessageListener] [Camel (alfrescoCamelContext) thread #3 - JmsConsumer[nl.contezza.tezza-services]] Updating zaakinformatieobject in ZRC for file 'TESTDOCUMENT VALID SIGN Test (2025-1760365844947).docx' failed.
2025-10-13T16:30:45,827 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] relevanteAndereZaken length: 0
2025-10-13T16:30:45,830 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [updateLinks] tza:links successfully updated for folder: ZAAK-2025-0000000637
2025-10-13T16:30:45,830 [] INFO  [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [update] relevanteAndereZaken successfully updated in tza:links.

Documenten worden niet langer gearchiveerd in OpenZaak. Getest op dev-tezza met twee zaken ZAAK-2025-0000000637, ZAAK-2025-0000000638:

Actions

#12

Updated by Bram Geerlings 2 months ago

Assignee changed from Bram Geerlings to Rick de Rooij

Actions

#13

Updated by Bram Geerlings 2 months ago

File clipboard-202510141420-vekix.png clipboard-202510141420-vekix.png added

    2025-10-14 14:10:31.686 | 2025-10-14T14:10:31,683 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Executing action: nl.contezza.rm.action.ArchiveFolderActionExecuter
2025-10-14 14:10:47.570 | 2025-10-14T14:10:47,567 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Record Category Name: Bestemmingsplan opstellen
2025-10-14 14:11:00.609 | 2025-10-14T14:11:00,604 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Record Category Name: 2025
2025-10-14 14:11:12.452 | 2025-10-14T14:11:12,448 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Record Category Name: 5 JAAR VERNIETIGEN
2025-10-14 14:11:30.642 | 2025-10-14T14:11:30,637 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] RecordFolder: ZAAK-2025-0000000008 (workspace://SpacesStore/f430c8b6-079b-4361-b0c8-b6079bf3616a)
2025-10-14 14:11:38.867 | 2025-10-14T14:11:38,864 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Archiving 1 files.
2025-10-14 14:11:42.683 | 2025-10-14T14:11:42,680 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9]  > Create record for file: TESTDOCUMENT VALID SIGN Test.docx
2025-10-14 14:12:00.987 | 2025-10-14T14:12:00,985 [] DEBUG [rm.permissions.ContezzaExtendedSecurityService] [http-nio-8080-exec-9] === ContezzaExtendedSecurityService.set() ===
2025-10-14 14:12:00.992 | 2025-10-14T14:12:00,988 [] DEBUG [rm.permissions.ContezzaExtendedSecurityService] [http-nio-8080-exec-9] Readers to assign: [GROUP_site_ZTBestemmingsplanopstellen_SiteManager, GROUP_site_ZTBestemmingsplanopstellen_SiteContributor, GROUP_site_ZTBestemmingsplanopstellen_SiteCollaborator, GROUP_site_ZTBestemmingsplanopstellen_SiteConsumer]
2025-10-14 14:12:00.996 | 2025-10-14T14:12:00,993 [] DEBUG [rm.permissions.ContezzaExtendedSecurityService] [http-nio-8080-exec-9] Writers to assign: [GROUP_site_ZTBestemmingsplanopstellen_SiteManager, GROUP_site_ZTBestemmingsplanopstellen_SiteCollaborator, admin]
2025-10-14 14:12:17.838 | 2025-10-14T14:12:17,836 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9]  > File to action: TESTDOCUMENT VALID SIGN Test.docx
2025-10-14 14:12:20.088 | 2025-10-14T14:12:20,087 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9]  > Declare record for file: TESTDOCUMENT VALID SIGN Test.docx
2025-10-14 14:12:20.614 | 2025-10-14T14:12:20,613 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Copy properties from folder: ZAAK-2025-0000000008
2025-10-14 14:12:21.037 | 2025-10-14T14:12:21,037 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Done.
2025-10-14 14:12:21.046 | 2025-10-14T14:12:21,045 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.074 | 2025-10-14T14:12:21,074 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.090 | 2025-10-14T14:12:21,089 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.184 | 2025-10-14T14:12:21,184 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.289 | 2025-10-14T14:12:21,279 [] ERROR [extensions.webscripts.AbstractRuntime] [http-nio-8080-exec-9] Exception from executeScript: 09140084 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnMoveNodePolicy.onMoveNode(org.alfresco.service.cmr.repository.ChildAssociationRef,org.alfresco.service.cmr.repository.ChildAssociationRef) in transaction 2842991e-303e-46ed-8299-1e303ec6ed54 : null(Cannot invoke "org.alfresco.service.cmr.security.PermissionService.getInheritParentPermissions(org.alfresco.service.cmr.repository.NodeRef)" because "this.this$0.permissionService" is null)
2025-10-14 14:12:21.289 | org.alfresco.error.AlfrescoRuntimeException: 09140084 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnMoveNodePolicy.onMoveNode(org.alfresco.service.cmr.repository.ChildAssociationRef,org.alfresco.service.cmr.repository.ChildAssociationRef) in transaction 2842991e-303e-46ed-8299-1e303ec6ed54 : null(Cannot invoke "org.alfresco.service.cmr.security.PermissionService.getInheritParentPermissions(org.alfresco.service.cmr.repository.NodeRef)" because "this.this$0.permissionService" is null)
2025-10-14 14:12:21.289 |     at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:263) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.289 |     at org.alfresco.repo.policy.TransactionBehaviourQueue.beforeCommit(TransactionBehaviourQueue.java:141) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.util.transaction.TransactionSupportUtil$TransactionSynchronizationImpl.doBeforeCommit(TransactionSupportUtil.java:536) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.util.transaction.TransactionSupportUtil$TransactionSynchronizationImpl.doBeforeCommit(TransactionSupportUtil.java:516) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.util.transaction.TransactionSupportUtil$TransactionSynchronizationImpl.beforeCommit(TransactionSupportUtil.java:481) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.support.TransactionSynchronizationUtils.triggerBeforeCommit(TransactionSynchronizationUtils.java:97) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.support.AbstractPlatformTransactionManager.triggerBeforeCommit(AbstractPlatformTransactionManager.java:986) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:775) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:758) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:663) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 |     at org.alfresco.util.transaction.SpringAwareUserTransaction.commit(SpringAwareUserTransaction.java:507) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:474) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:340) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.runWithTransactionIfNeeded(ExecuteWebscript.java:353) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 |     at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.lambda$runScriptWithTransactionAndAuthentication$0(ExecuteWebscript.java:326) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:602) ~[alfresco-data-model-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.runScriptWithTransactionAndAuthentication(ExecuteWebscript.java:326) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 |     at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.execute(ExecuteWebscript.java:170) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:506) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:685) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:721) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.executeScriptInternal(RepositoryContainer.java:413) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:309) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:423) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 |     at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:210) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 |     at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:131) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.web.scripts.AlfrescoWebScriptServlet.service(AlfrescoWebScriptServlet.java:43) [alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:658) [servlet-api.jar:6.0]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:195) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51) [tomcat-websocket.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.alfresco.module.aosmodule.service.ContextRootFilter.doFilter(ContextRootFilter.java:93) [alfresco-aos-repo-binding-3.2.0.jar:?]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.springframework.extensions.webscripts.servlet.SecurityHeadersFilter.doFilter(SecurityHeadersFilter.java:177) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:68) [alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.alfresco.web.app.servlet.ClearSecurityContextFilter.doFilter(ClearSecurityContextFilter.java:53) [alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:167) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:483) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:116) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:732) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:666) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:344) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:398) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:903) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1769) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1189) [tomcat-util.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:658) [tomcat-util.jar:10.1.42]
2025-10-14 14:12:21.290 |     at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63) [tomcat-util.jar:10.1.42]
2025-10-14 14:12:21.290 |     at java.base/java.lang.Thread.run(Thread.java:840) [?:?]
2025-10-14 14:12:21.290 | Caused by: java.lang.NullPointerException: Cannot invoke "org.alfresco.service.cmr.security.PermissionService.getInheritParentPermissions(org.alfresco.service.cmr.repository.NodeRef)" because "this.this$0.permissionService" is null
2025-10-14 14:12:21.290 |     at org.alfresco.module.org_alfresco_module_rm.security.FilePlanPermissionServiceImpl$6.doWork(FilePlanPermissionServiceImpl.java:557) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.module.org_alfresco_module_rm.security.FilePlanPermissionServiceImpl$6.doWork(FilePlanPermissionServiceImpl.java:550) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:602) ~[alfresco-data-model-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at org.alfresco.module.org_alfresco_module_rm.util.AuthenticationUtil.runAs(AuthenticationUtil.java:64) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 |     at org.alfresco.module.org_alfresco_module_rm.security.FilePlanPermissionServiceImpl.onMoveRecord(FilePlanPermissionServiceImpl.java:549) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 |     at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/java.lang.reflect.Method.invoke(Method.java:568) ~[?:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.policy.JavaBehaviour$JavaMethodInvocationHandler.invoke(JavaBehaviour.java:181) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     at jdk.proxy3/jdk.proxy3.$Proxy234.onMoveNode(Unknown Source) ~[?:?]
2025-10-14 14:12:21.290 |     at jdk.internal.reflect.GeneratedMethodAccessor987.invoke(Unknown Source) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
2025-10-14 14:12:21.290 |     at java.base/java.lang.reflect.Method.invoke(Method.java:568) ~[?:?]
2025-10-14 14:12:21.290 |     at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:250) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 |     ... 62 more

De logging geeft aan dat PermissionService in FilePlanPermissionService null is, dit wordt onderschreven in debug:

Actions

#14

Updated by Rick de Rooij 2 months ago

Naar aanleiding van Tezza overleg, voorkom duplicate permissions: https://git.contezza.nl/develop/alfresco/rm-permissions-patch/-/commit/63166714c474fcacf311c8d7374f2c6245130561

Actions

#15

Updated by Rick de Rooij about 2 months ago

Assignee changed from Rick de Rooij to Tahir Malik

Tahir. Kun je valideren of de patch nu goed werkt. Je kunt wat tests doen op DEV.

Gr, Rick

Actions

#16

Updated by Tahir Malik about 1 month ago

Status changed from In Progress to Ready in Test
Assignee changed from Tahir Malik to Rick de Rooij

Geaccepteerd, staat goed in DEV
De wrapper groep is verwijderd en we kunnen deze doorvoeren, pas bij een GUH klant kunnen we dit echt goed gaan testen.
Kunnen we ook een IT runnen met 100 zaken die we archiveren dan controleren dat de gebruiker bijv. Paul nog bij zijn data kan?

Actions

#17

Updated by Rick de Rooij about 1 month ago

Status changed from Ready in Test to Resolved
% Done changed from 80 to 100

Patch 1.0.0 is gemaakt: https://git.contezza.nl/develop/alfresco/rm-permissions-patch

Tezza RM 2.2.0 is gemaakt met patch versie erin: https://git.contezza.nl/develop/products/tezza-rm/-/tree/tezza-rm-2.2.0?ref_type=tags.

Zal meegaan met de volgende TS release.

Actions

Version list Copy link

Also available in: Atom PDF