Creating a workflow to give permissions to a SharePoint folder using Impersonation Step

Hi There,
I have been tasked with creating a workflow in my organise that will allow our users with (Contributor access) to grant people access upon creating a folder in our Shared Documents library.
Currently when our users create a folder, they need to logged a call with site administrators to granted the relevant people access to the folder and its contents.
Is it possible to create a solution that will kick off automatically upon creation of a folder and allow the Creator Only to grant a subset of users permissions to the folder using the Impersonation Step?
Any suggestions would be highly appreciated.
Regards
Tibz
regards Tibz

Hi There
Thank you for your response.
I managed to create a workflow that can be started automatically upon the creation of a folder in my document library. I then added an Impersonation step where I used the "Remove list Item Permissions" & "Add List Item Permissions" actions.
The challenge I am faced with is on the Remove Permissions action, I want to remove all inherited permissions for all existing users and only leave Users with Full Control. Is there a way to select All Existing Users in one function and perhaps
pass that as a "Selected Users" parameter? Currently I have to select the users/groups individually and there are over 100 existing users/groups to choose from.
Any thoughts on how I can work around this?
regards Tibz

Similar Messages

How to give permissions to a KM folder.

Hi experts,
I have created a folders in KM through Content Management -> Explorer -> Documents now I want to restrict user from accessing the folders how can I do that I don't find any ting to assign permission to it.
Can any one please help me in this regards.
Thanks

Hi GLM,
I have followed same steps but its not working for me
Steps
1) Created a folder called Test from Content Management role.
2) Changed the permission of the folder for everone User group to Read. and full control to my user.
3) uploaded a file called Test.txt.
4) logged of the system.
5) logged in to the portal with other user name.
6) tried to delete the file uploaded in Test folder, and file got deleted.
file got deleted that mean I am not successful in my job.
Any other way you can suggest.
Thanks

Workflow inheritance and permissions

Hi,
I have 2 questions:
1) Is workflow (approval cycle) which is applied to a folder inherited by its subfolders? How can I make it inheritable?
2)Is it possible to give permissions to a folder such that a particular group of users can create only folders no content and another group is able to only create content (upload etc) but not create a new folder/subfolder?
Any replies will be greatly appreciated..
Thanks in advance,
Poonam

Hi Poonam,
Workflow approval cycle is not inheritable as of now. It may be the case that SAP will support in future. For your second question i think custom development is reuired.

Creating a Workflow to print PDFs with certain attributes

I work in the media dept of a college and am looking for an easier way to print students coursework which they export from Adobe Indesign CS4 as a PDF file.
I have managed to enable printing all PDFs on Tabloid extra paper from my network printer, by setting the default print settings. I have the printer in my dock so all I need to do is drag the PDFs in a folder to the printer icon on the dock and it prints all PDFs.
This is great, however I would like to have more control over this process. If possible I would like to print only the PDFs that have a certain format.
The students are supposed to export there PDFs from Indesign with the "spreads" checkbox checked. This produces a document that has a number of A4 sized pages in portrait and 1 A3 sized page in landscape.
I want to know if there is anyway of printing of the correctly formatted PDFs, whilst skipping the incorrectly formatted PDFs, without having to go through all the PDFs and check the formatting before printing?
Any help or ideas on this would be great.
Thanks

Hi There
Thank you for your response.
I managed to create a workflow that can be started automatically upon the creation of a folder in my document library. I then added an Impersonation step where I used the "Remove list Item Permissions" & "Add List Item Permissions" actions.
The challenge I am faced with is on the Remove Permissions action, I want to remove all inherited permissions for all existing users and only leave Users with Full Control. Is there a way to select All Existing Users in one function and perhaps
pass that as a "Selected Users" parameter? Currently I have to select the users/groups individually and there are over 100 existing users/groups to choose from.
Any thoughts on how I can work around this?
regards Tibz

Simple 2013 Workflow to break permissions inheritance on a Document Library File?

Anybody got an example of this? Suspect SPD 2013 can't do it and that it must be using VS 2012.
Want a simple solution of a Doc library where users drop files in, but then, users can only View, Edit, Replace and Delete files they created.
============================
Thank You
cyberpine.com

When using a 2010 Workflow you need to add an impersonation step to get the Replace permissions Action. I just tried it with an SPD workflow in my copy of SPO (which has been upgraded to 2013) and it works fine. 2013 workflows don't have an impersonation
step, so there is no replace permissions action. The actions/steps are greyed out unless you've selected an appropriate slot in the designer. Could that be what is happening?
Although there are API available on the SharePoint server to change list item permissions you can only use that in code running on the server, which you can't do in SPO. You wouldn't be able to use this in Azure or another provider. You could
use them in a custom web service created for an OnPrem 2013 environment. For SPO you can only use client side code or web services that already exist. As I mentioned previously the permissions web service doesn't go down to the item permissions
level. I'm also not aware of any CSOM that can change permissions on list items at this point either.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

How to create a workflow dealing with customizing program(Add-on program)

Dear ALL,
I am new to workflow and I was assigned to create a workflow related to an customizing program(Dynpro screen).
I know we can refer to some std. template for workflow developing.
However, I don't know how to create a brand new workflow to deal with the add-on program and table.
My major difficulty is how to create a new object:
--How to create the new event to track the operation of add-on program, for example, push 'submit' button.
--How to create method to update the add-on table.
I do hope someone could give me some guidance.
Thank,
Gary

This is a Function Module that triggers an event ob Business Object tht you will create by making a subtype of Business Object. Use Transaction Code SWO1 to do so.
FUNCTION zwf_process_trip.
""Local Interface:
*" IMPORTING
*"     VALUE(I_EMP_NUMBER) TYPE PERNR_D
*"     VALUE(I_EMP_TRIP) TYPE REINR
INCLUDE <cntn01> .
DATA:i_emp_details TYPE STANDARD TABLE OF p0001, "Employee Details
       wa_request    TYPE p0001,                    "Workarea for Employee details
       v_country_grp TYPE molga,                    "Country SubGrouping
       v_object_key TYPE sweinstcou-objkey.        "Key for the buisness object ZWOBUSTRIP
CONSTANTS: c_bo_trip     TYPE swo_objtyp VALUE 'ZWOBUSTRIP',
             c_event_trip TYPE swo_event VALUE 'TripCreate',
             c_infy_type_1 TYPE infty      VALUE '0001'.
Event Container declaration
swc_container i_event_cont.
swc_create_container i_event_cont.
Reading the INFO TYPE 0001 to obtain the
Employee details
CALL FUNCTION 'HR_READ_INFOTYPE'
    EXPORTING
      pernr           = i_emp_number
      infty           = c_infy_type_1
      begda           = sy-datum
      endda           = sy-datum
    TABLES
      infty_tab       = i_emp_details
    EXCEPTIONS
      infty_not_found = 1
      OTHERS          = 2.
SY-SUBRC check is not required as the error
handelling will be done by WorkFlow rule
resolution.
CLEAR wa_request.
READ TABLE i_emp_details INTO wa_request INDEX 1.
IF sy-subrc = 0.
Retrieving the Country SubGrouping for the employee
    SELECT SINGLE molga
      FROM t001p
      INTO v_country_grp
     WHERE werks = wa_request-werks
       AND btrtl = wa_request-persk.
ENDIF.
Sending the relevant data to event container
swc_set_element i_event_cont 'EmpId'     i_emp_number.
IF sy-subrc <> 0.
No Processing needed.
ENDIF.
swc_set_element i_event_cont 'PersonnelArea'    wa_request-werks.
IF sy-subrc <> 0.
No Processing needed.
ENDIF.
swc_set_element i_event_cont 'CountryGrouping' v_country_grp.
IF sy-subrc <> 0.
No Processing needed.
ENDIF.
swc_set_element i_event_cont 'EmpSubGrp'       wa_request-persk.
IF sy-subrc <> 0.
No Processing needed.
ENDIF.
swc_set_element i_event_cont 'EmpTripId'       i_emp_trip.
IF sy-subrc <> 0.
No Processing needed.
ENDIF.
Raising the event to trigger the workflow
v_object_key = i_emp_number.
CALL FUNCTION 'SWE_EVENT_CREATE'
    EXPORTING
      objtype           = c_bo_trip
      objkey            = v_object_key
      event             = c_event_trip
    TABLES
      event_container   = i_event_cont
    EXCEPTIONS
      objtype_not_found = 1
      OTHERS            = 2.
IF sy-subrc <> 0.
No Processing needed.
ENDIF.
COMMIT WORK.
ENDFUNCTION.
SWEL Transaction Code is used to track event linkage.
SWUS is used to test Workflow manually with single test.
<b>Please reward points if useful</b>
Thanks
Arghadip

Create a folder with permissions set to This Folder, subfolders

Basically my app creates 4 folders that gives a specific user certain permissions.
I can create the folder find, and i can give the user the correct permissions, but by defaulse it has Apply To set to this folder only, so if the user creates a folder, they wont have permissions to access it.
I want to give it permissions that Apply to: This folder, subfolders, and files.
I have spent hours upon hours trying different things, and trying to find the answer anywhere. Any help is greatly appreciated.
Here is my code to create the folders:
string mailDataPath = "E:\\Data\\MailData\\" + logonName;
string userDataPath = "E:\\Data\\UserData\\" + logonName;
string userProfilePath = "E:\\Data\\UserProfile\\" + logonName;
string userSharedPath = "E:\\Data\\UserShared\\" + logonName;
path[0] = mailDataPath;
path[1] = userDataPath;
path[2] = userProfilePath;
path[3] = userSharedPath;
//If folders do not exists, create them.
for (int x = 0; x < pathAmount; x++)
if (!Directory.Exists(path[x]))
Directory.CreateDirectory(path[x]);
//Sets folder permissions dependant on which folder it is
if (path[x] != userProfilePath)
DirectoryInfo info = new DirectoryInfo(path[x]);
DirectorySecurity security = info.GetAccessControl();
security.AddAccessRule(new FileSystemAccessRule(logonName, FileSystemRights.Modify, AccessControlType.Allow));
info.SetAccessControl(security);
else if (path[x] == userProfilePath)
DirectoryInfo info = new DirectoryInfo(path[x]);
DirectorySecurity security = info.GetAccessControl();
security.AddAccessRule(new FileSystemAccessRule(logonName, FileSystemRights.FullControl, AccessControlType.Allow));
info.SetAccessControl(security);

Figured it out. It wasn't as difficult as i made it out to be.
I just need to use 2 access rules
DirectoryInfo info =
new
DirectoryInfo(path[x]);
DirectorySecurity security = info.GetAccessControl();
security.AddAccessRule(new
FileSystemAccessRule(logonName,
FileSystemRights.Modify,
InheritanceFlags.ContainerInherit,
PropagationFlags.None,
AccessControlType.Allow));
security.AddAccessRule(new
FileSystemAccessRule(logonName,
FileSystemRights.Modify,
InheritanceFlags.ObjectInherit,
PropagationFlags.None,
AccessControlType.Allow));
info.SetAccessControl(security);
this is the code for the setting of the permissions.
had to play around with it a bunch to get the correct inheritance.
Im sorry i dont realy understand. Where do i put this code? Is there a guide for were to put this? Thanks for your help! :)

Error while creating concurrent workflow instances with dynamic participant

Hi All,
I have a workflow which has 3 interactive activites. The second interactive activity has requires approval of atleast 3 users to proceed. The participants are also not known in advance and are created dynamically by creating the directory session. The workflow is instantiated using an external trigger. The approval for interactive activities is also provided by an external trigger (API call).
Now, there is a scenario where i have 1000 requests coming in to ALBPM and workflow instance should be created for each of them. But only one instance is created and for the rest i get the following exception. This also happens with just 2 requests. I also tried calling the API in a synchronized way but didnt help.
Is anybody aware why is this error encountered anf how it can be resolved?
java.lang.IllegalStateException: Cannot set the directory Connector Service while connector service is started
at fuego.connector.CompositeConnectorService.setDirectoryConnectorService(CompositeConnectorService.java:97)
at fuego.connector.CompositeConnectorService.restartDirectoryConnectorService(CompositeConnectorService.java:52)
at fuego.directory.DirectoryConfigurationManager.loadDirectoryConfiguration(DirectoryConfigurationManager.java:265)
at fuego.directory.DirectoryConfigurationManager.getDirectoryConfiguration(DirectoryConfigurationManager.java:217)
at fuego.directory.DirectoryConfigurationManager.getDirectoryConfigType(DirectoryConfigurationManager.java:199)
at fuego.directory.provider.Factory.getDirectoryFactory(Factory.java:214)
at fuego.directory.Directory.fillPassport(Directory.java:122)
at fuego.directory.DirectoryPassport.fillPassport(DirectoryPassport.java:274)

Hi Dan,
Thanks for replying and giving attention. I have the following scenario :-
1. I am getting a list of identifiers(some number) from a third party application along with the users/participants who are liable to approve the workflow instance.
2. I create a workflow instance using this identifier through PAPI using process service session and also create the user/participant through PAPI by using the following code. Please note that i dont create participant in ALBPM instead i do it programatically in java using the PAPI :-
DirectorySession directorysession = null;
if (userVO != null && userVO.getUserId() != null && !userVO.getUserId().trim().equals(""))
+{+
+     directorysession = this.createFDISession();+
+     List<RoleAssignment> roleAssignmentList = new ArrayList<RoleAssignment>();+
+     try {+
DirOrganizationalRole[] dirOrganizationalRoleArray = DirOrganizationalRole.fetchAll(directorysession);
for(int i=0; dirOrganizationalRoleArray!=null && i<dirOrganizationalRoleArray.length; i+) {+
+DirOrganizationalRole role = dirOrganizationalRoleArray;+
+}+
int permissions = -1;
permissions
+= 0 |+
DirHumanParticipant.getPermissionValue("X") |
DirHumanParticipant.getPermissionValue("R") |
DirHumanParticipant.getPermissionValue("S") |
DirHumanParticipant.getPermissionValue("A") |
DirHumanParticipant.getPermissionValue("D") |
DirHumanParticipant.getPermissionValue("E") |
+0;+
+String[] whichRoles = new String[]{+
+"Approver",+
+"Requestor",+
+};+
+DirHumanParticipant.RoleAssignment[] roleAssignments = new DirHumanParticipant.RoleAssignment[whichRoles.length];+
for(int i=0; i<whichRoles.length; i+) {+
+roleAssignments[i] = new DirHumanParticipant.RoleAssignment(whichRoles[i], permissions, DirOrganizationalRole.fetch(directorysession, whichRoles[i]).getIn());+
+}+
+     String organizationUnit = configuration.getProperty("ORGANIZATION_UNIT");//fuegoFileProperties.getProperty(BVIDConstants.FUEGO_CONNECTIVITY_KEY_ORGANIZATION_UNIT);+
+     String newUserPwd = configuration.getProperty("FUEGO_FDI_NEW_USER_PASSWORD");//fuegoFileProperties.getProperty(BVIDConstants.FUEGO_CONNECTIVITY_KEY_FDI_PWD);+
+     DirOrganizationalUnit orgUnit = DirOrganizationalUnit.fetch(directorysession,organizationUnit);+
+     DirHumanParticipant user = DirHumanParticipant.create(directorysession, userVO.getUserId(), userVO.getFirstName(), userVO.getLastName(),+
+                              userVO.getFirstName(), userVO.getEmail(), userVO.getPhone(), "",+
+                              newUserPwd, orgUnit,roleAssignments, true);+
+     user.update();+
+     }+
+     finally+
+     {+
+               log.info("diconnecting the directory session created for creating participant");+
+               directorysession.disconnect();+
+     }+
+}+
3. The workflow instance then waits at interactive activity to get the next trigger with the same identifier to move the workflow ahead.
4. Now the case is that i can get 1000 such identifiers at a time in a file which i ll read for which i need to create 1000 workflow instances parallely. During this process i get the following exception : -
java.lang.IllegalStateException: Cannot set the directory Connector Service while connector service is started
at fuego.connector.CompositeConnectorService.setDirectoryConnectorService(CompositeConnectorService.java:97)
at fuego.connector.CompositeConnectorService.restartDirectoryConnectorService(CompositeConnectorService.java:52)
at fuego.directory.DirectoryConfigurationManager.loadDirectoryConfiguration(DirectoryConfigurationManager.java:265)
at fuego.directory.DirectoryConfigurationManager.getDirectoryConfiguration(DirectoryConfigurationManager.java:217)
at fuego.directory.DirectoryConfigurationManager.getDirectoryConfigType(DirectoryConfigurationManager.java:199)
at fuego.directory.provider.Factory.getDirectoryFactory(Factory.java:214)
at fuego.directory.Directory.fillPassport(Directory.java:122)
at fuego.directory.DirectoryPassport.fillPassport(DirectoryPassport.java:274)
Please let me know if you need any more information. awaiting your help
Thanks,
Anand

How to create Maintenance (PM) Order with Permit key?

Dear Gurus,
I use BAPI_ALM_ORDER_MAINTAIN to create Outstanding Order using TCode IW31.
It's working fine.
I would like to give Permit key for the order.
The FM documentation says that it is not possible with this.
Is there any other functionality to be used?
Can anyone please help me?
Thanks & Regards,
Neeraj.

Can you anyone please help me out?
Thanks & Regards,
Neeraj

Error in create user workflow......

Hi...........
I have customized create user workflow and added email user activity to notify activity. Since i don't have any SMTP host name..... i am using a text file to recive the email....when i create a new user i am getting the error.....
com.waveset.util.WavesetException: Unknown administrator C:/opt/ses/lab/output/email/approval.txt.
But all mail are redirecting to text file name that i give in the waveset.property file notifiction redirect=path...
if we want to send mail to different text file ie for each organization a diffent approvers ie approver a mail should be in spreate text file so on.. where should i mention the path name of file for each approver..........

When you set the notification.redirect property in waveset.properties, the process will redirect all the email notifications to the same file.
The error you are getting here is probably because you are passing the filename with the path in the "to address" in your email template. The "to address" should always have a valid email address in it.

Specific Due Date Syntax for Create Task Workflow Action

I'm looking for a formula which will create a monthly due date on a specific day of the month (ie 1st or 15th). I have figured out a way to create recurring activities through workflows by adding a recuurence picklist but I currently only have monthly recurrences as Today()+30 which works but is not as clean as a monthly task that occurs on the 15th of every month.

Record Type=Activity
Event=When modified record saved
Workflow condition=FieldValue('<Type>')='To Do' AND FieldValue('<plRecurrence_ITAG>')='Every 30 days' AND FieldValue('<Status>')='Completed'
Actions=Create Task
Recurrence picklist is a required field and is chosen be the end user upon creation of the original activity (Type=To Do). The duplicate activity is created upon completion (see condition) and now the end user has a recurring task due 30 days out. this future task has the recurrence in the subject (since the recurrence field cannot be defined in the workflow action) and the end user is prompted by the system to complete the activity record (choose a recurrence) upon trying to save the record as complete or by clicking the "Mark as completed" button. Thus the cycle is repeated.
All I'm trying to figure out is instead of having the formula [<DueDate>]+30 in the Due Date* field within the create task workflow action, I'd like a formula that can choose a specific day of the month. I've tried combinations of cast, concat, timeframe, month, year...expressions to give me the date value I'm looking for (ie 4/15/2011) but I can't get the syntax to work. all I need is that syntax that can provide a specific date (4/15/2011) derived from the due date.

How to create activity workflow based on the Web API 2 services

Hi,
We have Web API 2 services and we want create activity workflow based on the Web API 2 services.
Web API 2 services provide some application operations and based on this operations we would like to create custom activity workflow.
Question:
Is that possible?
Could you please give best practices to create activity workflow based on the Web API 2 services ?
Thanks for your support.

HI Max_P,
Welcome to workflow forum.
ASP.NET Web API is a framework that makes it easy to build HTTP services that reach a broad range of clients, including browsers and mobile devices. ASP.NET Web API is an ideal platform for building RESTful applications on the .NET Framework.
I researched relevant topic about creating workflow application using Web API 2, I just found these resources about it.
Learn About ASP.NET Web API
Hope it helps.
Best regards,
Angie
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

When i open itunes, it gives me a message "the folder itunes is on a locked disk or you do not have write permissions for this folder" i am the only user and it was working a week ago whats wrong with it? it will not open itunes

when i open itunes, it gives me a message "the folder itunes is on a locked disk or you do not have write permissions for this folder" i am the only user and it was working a week ago whats wrong with it? it will not open itunes

Hi lvdmerwe!
I have two articles here for you that should be able to help you troubleshoot this issue further:
Trouble adding music to iTunes library or importing audio CD
http://support.apple.com/kb/ts1387
iTunes: Missing folder or incorrect permissions may prevent authorization
http://support.apple.com/kb/ts1277
Take care, and thanks for visiting the Apple Support Communities.
-Braden

How to create a three state approval workflow in SharePoint 2013 using visual studio 2013

Hi Everyone,
i have a requirement like 3 state to approve. Here is the details:- when the item added into the list it will go for reviewer. Once the reviewer review the item, he will assign the task to concern person/department(Parallel process more than two persons).
Once they will approve the request again it will come back to reviewer and he will assign the task to team member(parallel process). Once the team member accepted then workflow terminate.
i want develop this workflow using visual studio 2013 only, not using designer..
Thanks in Advance.....
Mallesh

Hello,
you can find multiple sample on the web like those
http://www.splessons.com/2013/12/create-state-machine-workflow-in-sharepoint-2013-using-visual-studio-2012/
http://msdn.microsoft.com/en-us/library/ee231606.aspx
I don't think that's very different using VS2013 or VS2012
Best regards, Christopher.
Blog |
Mail
Please remember to click "Mark As Answer" if a post solves your problem or
"Vote As Helpful" if it was useful.
Why mark as answer?

How do i create a workflow to delete tasks.

I've created a workflow that will take the Title, Start Date, and End Date from one list (roomReserved) and then create a task on another list (centralCal) setup as a central calendar. When a yes/no checkbox is checked, it will then create the task on the
centralCal. The problem I'm having right now is i am unable to remove or delete the task created in centralCal when the checkbox is unchecked.
I way I'm trying to delete the task in the workflow is:
if current item:checkbox equals no
then delete item in centralCal
in the "Choose List Item" popup menu
I choose List:centralCal
Find the List Item:
Field: Title
Value:
Lookup for Single line of text (popup)
Data source: Current Item
Field from source: Title
Return field as: string (greyed out)
To make sure the correct item is deleted I'm comparing the titles from the roomReserved and centralCal.
What I want the workflow to do is delete the task from centralCal if the checkbox is unchecked from roomReserved. Any idea's on how to change my workflow to fix this would be greatly appreciated.

Hi James,
I tried reproducing the issue in my environment. I created a list1 with two column: title and checkbox, a list2 with one column: title.
I created two workflows in SharePoint Designer: workflow1, if current item checkbox field equals yes, create item in list2, title= current item title. Workflow1 start automatically when an item is created.
Workflow2: if current item checkbox field equals no, delete item in list2. Choose List Item is set as below, and workflow2 starts automatically when item is changed.
Regards,
Rebecca Tu
TechNet Community Support

Creating a workflow to give permissions to a SharePoint folder using Impersonation Step

Similar Messages

Maybe you are looking for