Actions
Project activity #34984
open
Tezza RM permissions patch
Added by Bram Geerlings 19 days ago. Updated 5 days ago.
Status:
In Progress
Priority:
P4 Normal
Assignee:
Category:
-
Target version:
Contezza Productontwikkeling - Contezza Development 2025.10
Start date:
03/10/2025
Due date:
% Done:
80%
Estimated time:
Description
Wanneer Alfresco Governance Services een record aanmaakt kijkt het naar de huidige gebruikers met rechten op de node en maakt hiervoor twee groepen:
IPRR-* : Alle gebruikers met toegang tot de node
IPRW-* : Gebruikers met schrijfrechten op de node (meestal beheer rechten).
Dit zorgt voor een groot aantal IPR groepen die hun tol eisen op de database en responsetijden bij searches.
Om het aantal In Place Record groepen binnen Alfresco hanteerbaar te houden willen we de volgende patch ontwikkelen:
Per node wordt er een snapshot gemaakt van groepen en gebruikers die op dat moment rechten hebben op de node. Deze gebruikers worden niet in IPR groepen geplaatst, maar krijgen directe toegang op de record node met bijbehorende rechten:
- Waar voorheen groepen en/of gebruikers lid werden gemaakt van de IPRR groep van de node worden ze nu op de node gezet met 'Read' permissie.
- Waar voorheen groepen en/of gebruikers lid werden gemaakt van de IPRW groep van de node worden ze nu op de node gezet met 'Filing' permissie.
Files
| clipboard-202510130912-avfhw.png (68.4 KB) clipboard-202510130912-avfhw.png | Bram Geerlings, 13/10/2025 09:12 AM | ||
| clipboard-202510130923-osb5j.png (117 KB) clipboard-202510130923-osb5j.png | Bram Geerlings, 13/10/2025 09:23 AM | ||
| clipboard-202510131633-fyzpu.png (17.1 KB) clipboard-202510131633-fyzpu.png | Bram Geerlings, 13/10/2025 04:33 PM | ||
| clipboard-202510141420-vekix.png (114 KB) clipboard-202510141420-vekix.png | Bram Geerlings, 14/10/2025 02:20 PM |
Updated by Rick de Rooij 14 days ago
- Status changed from Backlog to In Progress
- Target version changed from Tezza Backlog to Contezza Development 2025.10
Updated by Rick de Rooij 14 days ago
Repo: https://git.contezza.nl/develop/alfresco/rm-permissions-patch
Ik heb de basis met test. Lijkt toch moeilijker te zijn. Filing of ReadRecords zijn alleen maar voor IPR groepen. Hoe en waarom dit niet kan is onduidelijk. Het is de vraag hoe ver we willen gaan. Maar het komt erop neer als je groep GROUP_IPR_SOME_NAME aanmaakt en die wordt wel lokaal gezet (locallySet). Doe je groep GROUP_TEST werkt het niet.
Updated by Rick de Rooij 13 days ago
- Assignee changed from Rick de Rooij to Bram Geerlings
- % Done changed from 0 to 80
Hi Bram,
Ik heb fix gemaakt. Moest ook FilePlanPermissionServiceImpl overschrijven.
Graag testen en reviewen.
Gr, Rick
Updated by Bram Geerlings 13 days ago
- Assignee changed from Bram Geerlings to Rick de Rooij
Review akkoord, integratie test succesvol lokaal uitgevoerd en nogmaals handmatig bevestigd.
Updated by Rick de Rooij 12 days ago
- Assignee changed from Rick de Rooij to Bram Geerlings
Hi Bram,
Module toegevoegd aan Tezza RM (fix/rm_permissions_patch_disable_ipr_groups/#34984).
Gaat mee met volgende deploy naar DEV.
Kun je de flow op Tezza DEV testen (vanaf maandag).
Gr, Rick
Actions
#9
Updated by Bram Geerlings 9 days ago
- File clipboard-202510130912-avfhw.png clipboard-202510130912-avfhw.png added
- File clipboard-202510130923-osb5j.png clipboard-202510130923-osb5j.png added
- Assignee changed from Bram Geerlings to Rick de Rooij
Getest op dev-tezza:
ZAAK-2025-0000000640 gearchiveerd (1 jaar vernietigen). Job voor archiveren handmatig gestart voor het archiveren van documenten, daarna voor het archiveren van de zaak. Resultaat: 
Verwachting zou zijn dat er geen IPRW of IPRR groepen op het document staan, en de site_[zaaktype]_[rol] groepen direct op het document terug zijn te vinden met de juiste rollen.
Onderstaande is een screenshot na lokale test met de rechten zoals verwacht: 
Updated by Rick de Rooij 9 days ago
- Assignee changed from Rick de Rooij to Bram Geerlings
De rm patch staat nu wel op DEV. Graag opnieuw testen.
Updated by Bram Geerlings 9 days ago
2025-10-13T16:30:44,675 [] ERROR [api.messaging.MessageListener] [Camel (alfrescoCamelContext) thread #3 - JmsConsumer[nl.contezza.tezza-services]] Updating zaakinformatieobject in ZRC for file 'TESTDOCUMENT VALID SIGN Test (2025-1760365843749).docx' failed.
2025-10-13T16:30:45,657 [] INFO [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] update zaak: ZAAK-2025-0000000638.
2025-10-13T16:30:45,712 [] INFO [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] relevanteAndereZaken length: 0
2025-10-13T16:30:45,717 [] INFO [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [updateLinks] tza:links successfully updated for folder: ZAAK-2025-0000000638
2025-10-13T16:30:45,717 [] INFO [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [update] relevanteAndereZaken successfully updated in tza:links.
2025-10-13T16:30:45,779 [] INFO [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] update zaak: ZAAK-2025-0000000637.
2025-10-13T16:30:45,807 [] ERROR [zrc.service.ZaakinformatieobjectenService] [Camel (alfrescoCamelContext) thread #3 - JmsConsumer[nl.contezza.tezza-services]] nl.vngrealisatie.zrc.ApiException: Bad Request
2025-10-13T16:30:45,808 [] ERROR [api.messaging.MessageListener] [Camel (alfrescoCamelContext) thread #3 - JmsConsumer[nl.contezza.tezza-services]] Updating zaakinformatieobject in ZRC for file 'TESTDOCUMENT VALID SIGN Test (2025-1760365844947).docx' failed.
2025-10-13T16:30:45,827 [] INFO [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [partial_update] relevanteAndereZaken length: 0
2025-10-13T16:30:45,830 [] INFO [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [updateLinks] tza:links successfully updated for folder: ZAAK-2025-0000000637
2025-10-13T16:30:45,830 [] INFO [api.script.ApiLogScript] [Camel (alfrescoCamelContext) thread #2 - JmsConsumer[nl.contezza.mq.actions]] [callback] [update] relevanteAndereZaken successfully updated in tza:links.
Documenten worden niet langer gearchiveerd in OpenZaak. Getest op dev-tezza met twee zaken ZAAK-2025-0000000637, ZAAK-2025-0000000638: 
Updated by Bram Geerlings 9 days ago
- Assignee changed from Bram Geerlings to Rick de Rooij
Updated by Bram Geerlings 8 days ago
2025-10-14 14:10:31.686 | 2025-10-14T14:10:31,683 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Executing action: nl.contezza.rm.action.ArchiveFolderActionExecuter
2025-10-14 14:10:47.570 | 2025-10-14T14:10:47,567 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Record Category Name: Bestemmingsplan opstellen
2025-10-14 14:11:00.609 | 2025-10-14T14:11:00,604 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Record Category Name: 2025
2025-10-14 14:11:12.452 | 2025-10-14T14:11:12,448 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Record Category Name: 5 JAAR VERNIETIGEN
2025-10-14 14:11:30.642 | 2025-10-14T14:11:30,637 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] RecordFolder: ZAAK-2025-0000000008 (workspace://SpacesStore/f430c8b6-079b-4361-b0c8-b6079bf3616a)
2025-10-14 14:11:38.867 | 2025-10-14T14:11:38,864 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Archiving 1 files.
2025-10-14 14:11:42.683 | 2025-10-14T14:11:42,680 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] > Create record for file: TESTDOCUMENT VALID SIGN Test.docx
2025-10-14 14:12:00.987 | 2025-10-14T14:12:00,985 [] DEBUG [rm.permissions.ContezzaExtendedSecurityService] [http-nio-8080-exec-9] === ContezzaExtendedSecurityService.set() ===
2025-10-14 14:12:00.992 | 2025-10-14T14:12:00,988 [] DEBUG [rm.permissions.ContezzaExtendedSecurityService] [http-nio-8080-exec-9] Readers to assign: [GROUP_site_ZTBestemmingsplanopstellen_SiteManager, GROUP_site_ZTBestemmingsplanopstellen_SiteContributor, GROUP_site_ZTBestemmingsplanopstellen_SiteCollaborator, GROUP_site_ZTBestemmingsplanopstellen_SiteConsumer]
2025-10-14 14:12:00.996 | 2025-10-14T14:12:00,993 [] DEBUG [rm.permissions.ContezzaExtendedSecurityService] [http-nio-8080-exec-9] Writers to assign: [GROUP_site_ZTBestemmingsplanopstellen_SiteManager, GROUP_site_ZTBestemmingsplanopstellen_SiteCollaborator, admin]
2025-10-14 14:12:17.838 | 2025-10-14T14:12:17,836 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] > File to action: TESTDOCUMENT VALID SIGN Test.docx
2025-10-14 14:12:20.088 | 2025-10-14T14:12:20,087 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] > Declare record for file: TESTDOCUMENT VALID SIGN Test.docx
2025-10-14 14:12:20.614 | 2025-10-14T14:12:20,613 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Copy properties from folder: ZAAK-2025-0000000008
2025-10-14 14:12:21.037 | 2025-10-14T14:12:21,037 [] DEBUG [rm.action.ArchiveFolderActionExecuter] [http-nio-8080-exec-9] Done.
2025-10-14 14:12:21.046 | 2025-10-14T14:12:21,045 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.074 | 2025-10-14T14:12:21,074 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.090 | 2025-10-14T14:12:21,089 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.184 | 2025-10-14T14:12:21,184 [] DEBUG [rm.permissions.ContezzaFilePlanPermissionServiceImpl] [http-nio-8080-exec-9] === ContezzaFilePlanPermissionServiceImpl.setupPermissions() ===
2025-10-14 14:12:21.289 | 2025-10-14T14:12:21,279 [] ERROR [extensions.webscripts.AbstractRuntime] [http-nio-8080-exec-9] Exception from executeScript: 09140084 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnMoveNodePolicy.onMoveNode(org.alfresco.service.cmr.repository.ChildAssociationRef,org.alfresco.service.cmr.repository.ChildAssociationRef) in transaction 2842991e-303e-46ed-8299-1e303ec6ed54 : null(Cannot invoke "org.alfresco.service.cmr.security.PermissionService.getInheritParentPermissions(org.alfresco.service.cmr.repository.NodeRef)" because "this.this$0.permissionService" is null)
2025-10-14 14:12:21.289 | org.alfresco.error.AlfrescoRuntimeException: 09140084 Failed to execute transaction-level behaviour public abstract void org.alfresco.repo.node.NodeServicePolicies$OnMoveNodePolicy.onMoveNode(org.alfresco.service.cmr.repository.ChildAssociationRef,org.alfresco.service.cmr.repository.ChildAssociationRef) in transaction 2842991e-303e-46ed-8299-1e303ec6ed54 : null(Cannot invoke "org.alfresco.service.cmr.security.PermissionService.getInheritParentPermissions(org.alfresco.service.cmr.repository.NodeRef)" because "this.this$0.permissionService" is null)
2025-10-14 14:12:21.289 | at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:263) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.289 | at org.alfresco.repo.policy.TransactionBehaviourQueue.beforeCommit(TransactionBehaviourQueue.java:141) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.util.transaction.TransactionSupportUtil$TransactionSynchronizationImpl.doBeforeCommit(TransactionSupportUtil.java:536) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.util.transaction.TransactionSupportUtil$TransactionSynchronizationImpl.doBeforeCommit(TransactionSupportUtil.java:516) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.util.transaction.TransactionSupportUtil$TransactionSynchronizationImpl.beforeCommit(TransactionSupportUtil.java:481) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.springframework.transaction.support.TransactionSynchronizationUtils.triggerBeforeCommit(TransactionSynchronizationUtils.java:97) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 | at org.springframework.transaction.support.AbstractPlatformTransactionManager.triggerBeforeCommit(AbstractPlatformTransactionManager.java:986) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 | at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:775) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 | at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:758) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 | at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:663) ~[spring-tx-6.1.14.jar:6.1.14]
2025-10-14 14:12:21.290 | at org.alfresco.util.transaction.SpringAwareUserTransaction.commit(SpringAwareUserTransaction.java:507) ~[alfresco-core-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:474) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:340) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.runWithTransactionIfNeeded(ExecuteWebscript.java:353) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 | at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.lambda$runScriptWithTransactionAndAuthentication$0(ExecuteWebscript.java:326) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 | at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:602) ~[alfresco-data-model-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.runScriptWithTransactionAndAuthentication(ExecuteWebscript.java:326) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 | at org.orderofthebee.addons.support.tools.repo.jsconsole.ExecuteWebscript.execute(ExecuteWebscript.java:170) ~[support-tools-repo-1.2.2.0-classes.jar:?]
2025-10-14 14:12:21.290 | at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:506) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:685) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:721) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.repo.web.scripts.RepositoryContainer.executeScriptInternal(RepositoryContainer.java:413) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:309) ~[alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:423) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 | at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:210) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 | at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:131) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 | at org.alfresco.repo.web.scripts.AlfrescoWebScriptServlet.service(AlfrescoWebScriptServlet.java:43) [alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:658) [servlet-api.jar:6.0]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:195) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51) [tomcat-websocket.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.alfresco.module.aosmodule.service.ContextRootFilter.doFilter(ContextRootFilter.java:93) [alfresco-aos-repo-binding-3.2.0.jar:?]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.springframework.extensions.webscripts.servlet.SecurityHeadersFilter.doFilter(SecurityHeadersFilter.java:177) [spring-webscripts-9.4.jar:9.4]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:68) [alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.alfresco.web.app.servlet.ClearSecurityContextFilter.doFilter(ClearSecurityContextFilter.java:53) [alfresco-remote-api-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:164) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:140) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:167) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:483) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:116) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:732) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:666) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:344) [catalina.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:398) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:903) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1769) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52) [tomcat-coyote.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1189) [tomcat-util.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:658) [tomcat-util.jar:10.1.42]
2025-10-14 14:12:21.290 | at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63) [tomcat-util.jar:10.1.42]
2025-10-14 14:12:21.290 | at java.base/java.lang.Thread.run(Thread.java:840) [?:?]
2025-10-14 14:12:21.290 | Caused by: java.lang.NullPointerException: Cannot invoke "org.alfresco.service.cmr.security.PermissionService.getInheritParentPermissions(org.alfresco.service.cmr.repository.NodeRef)" because "this.this$0.permissionService" is null
2025-10-14 14:12:21.290 | at org.alfresco.module.org_alfresco_module_rm.security.FilePlanPermissionServiceImpl$6.doWork(FilePlanPermissionServiceImpl.java:557) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 | at org.alfresco.module.org_alfresco_module_rm.security.FilePlanPermissionServiceImpl$6.doWork(FilePlanPermissionServiceImpl.java:550) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 | at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:602) ~[alfresco-data-model-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at org.alfresco.module.org_alfresco_module_rm.util.AuthenticationUtil.runAs(AuthenticationUtil.java:64) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 | at org.alfresco.module.org_alfresco_module_rm.security.FilePlanPermissionServiceImpl.onMoveRecord(FilePlanPermissionServiceImpl.java:549) ~[alfresco-governance-services-community-repo-23.4.1.1.jar:?]
2025-10-14 14:12:21.290 | at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
2025-10-14 14:12:21.290 | at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) ~[?:?]
2025-10-14 14:12:21.290 | at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
2025-10-14 14:12:21.290 | at java.base/java.lang.reflect.Method.invoke(Method.java:568) ~[?:?]
2025-10-14 14:12:21.290 | at org.alfresco.repo.policy.JavaBehaviour$JavaMethodInvocationHandler.invoke(JavaBehaviour.java:181) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | at jdk.proxy3/jdk.proxy3.$Proxy234.onMoveNode(Unknown Source) ~[?:?]
2025-10-14 14:12:21.290 | at jdk.internal.reflect.GeneratedMethodAccessor987.invoke(Unknown Source) ~[?:?]
2025-10-14 14:12:21.290 | at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
2025-10-14 14:12:21.290 | at java.base/java.lang.reflect.Method.invoke(Method.java:568) ~[?:?]
2025-10-14 14:12:21.290 | at org.alfresco.repo.policy.TransactionBehaviourQueue.execute(TransactionBehaviourQueue.java:250) ~[alfresco-repository-23.4.1.1.jar:23.4.1.1]
2025-10-14 14:12:21.290 | ... 62 more
De logging geeft aan dat PermissionService in FilePlanPermissionService null is, dit wordt onderschreven in debug:
Updated by Rick de Rooij 8 days ago
Naar aanleiding van Tezza overleg, voorkom duplicate permissions: https://git.contezza.nl/develop/alfresco/rm-permissions-patch/-/commit/63166714c474fcacf311c8d7374f2c6245130561
Updated by Rick de Rooij 5 days ago
- Assignee changed from Rick de Rooij to Tahir Malik
Tahir. Kun je valideren of de patch nu goed werkt. Je kunt wat tests doen op DEV.
Gr, Rick
Actions
