Problem creating items in a folder owned by another user

Question

Hi
Iam getting an exception when i try to create a folder owned (or shall i say) created by another user.Let me explain what iam doing :
1. I have created a folder "INPRISE" under "/home".I have
created an ACL "MyAcl" having group INPRISEGROUP
as the ACE having all permissions.I have set the ACL "MyAcl" on the folder "INPRISE".
2. I have created two users i1 and i2
and placed them in the group INPRISEGROUP .Both these users have a link under thei home folder to "INPRISE" folder(achieved by using and addItem()).
3. I could successfully login as i1 and create a folder "WebApps" under "INPRISE" and upload a document "A.txt" under "WebApps".
4.But when i log in as "i2" and try to create a document "B.txt" under "WebApps" which was created by user "i1" i get the following exception :
javawebserver: Got the user
javawebserver: got the primary user profile
javawebserver: THE HOME FOLDER IS --> i1
javawebserver: The home folder name is --> i1
javawebserver: home folder
javawebserver: Got the user
javawebserver: got the primary user profile
javawebserver: THE HOME FOLDER IS --> i1
javawebserver: The home folder name is --> i1
javawebserver: home folder
javawebserver: Got the user
javawebserver: got the primary user profile
javawebserver: THE HOME FOLDER IS --> i1
javawebserver: The home folder name is --> i1
javawebserver: home folder
javawebserver: **********Creating document in /home/i1/INPRISE/WebApps
javawebserver: Created document..
javawebserver: Setting permissions for the document....
javawebserver: setting the access level
javawebserver: Got the user
javawebserver: got the primary user profile
javawebserver: THE HOME FOLDER IS --> i2
javawebserver: The home folder name is --> i2
javawebserver: home folder
javawebserver: Got the user
javawebserver: got the primary user profile
javawebserver: THE HOME FOLDER IS --> i2
javawebserver: The home folder name is --> i2
javawebserver: home folder
javawebserver: Got the user
javawebserver: got the primary user profile
javawebserver: THE HOME FOLDER IS --> i2
javawebserver: The home folder name is --> i2
javawebserver: home folder
javawebserver: **********Creating document in /home/i2/INPRISE/WebApps
javawebserver: Error while creating document.....
javawebserver: oracle.ifs.common.IfsException: IFS-30002: Unable to create new
LibraryObject
javawebserver: oracle.ifs.common.IfsException: IFS-30048: Insufficient access t
o add items to a Folder
javawebserver: oracle.ifs.common.IfsException: IFS-30030: Permission not grante
d on specified ACL
javawebserver: at java.lang.Throwable.<init>(Compiled Code)
javawebserver: at java.lang.Exception.<init>(Compiled Code)
javawebserver: at org.omg.CORBA.UserException.<init>(Compiled Code)
javawebserver: at oracle.ifs.common.IfsException.<init>(Compiled Code)
javawebserver: at oracle.ifs.common.IfsException.<init>(Compiled Code)
javawebserver: at oracle.ifs.common.IfsException.<init>(Compiled Code)
javawebserver: at oracle.ifs.server.S_AccessControlList.verifyStandardPermissi
onEnabled(S_AccessControlList.java:602)
javawebserver: at oracle.ifs.server.S_PublicObject.verifyPublicObjectPermissio
n(S_PublicObject.java:2169)
javawebserver: at oracle.ifs.server.S_Folder.verifyCanAddItem(S_Folder.java:10
05)
javawebserver: at oracle.ifs.server.S_Folder.addReference(S_Folder.java:719)
javawebserver: at oracle.ifs.server.S_Folder.addReference(S_Folder.java:697)
javawebserver: at oracle.ifs.server.S_PublicObject.postCreateAddToFolder(S_Pub
licObject.java:2753)
javawebserver: at oracle.ifs.server.S_PublicObject.extendedPostInsert(S_Public
Object.java:995)
javawebserver: at oracle.ifs.server.S_LibraryObject.postInsert(S_LibraryObject
.java:1341)
javawebserver: at oracle.ifs.server.OperationState.executeAtomicOperations(Com
piled Code)
javawebserver: at oracle.ifs.server.S_LibraryObject.createInstance(S_LibraryOb
ject.java:2348)
javawebserver: at oracle.ifs.server.S_LibrarySessio n.newLibraryObject(S_Librar
ySession.java:6596)
javawebserver: at oracle.ifs.server.S_LibrarySession.newPublicObject(S_Library
Session.java:6637)
javawebserver: at oracle.ifs.server.S_LibrarySession.newPublicObject(S_Library
Session.java:6619)
javawebserver: at oracle.ifs.server.S_LibrarySession.DMNewPublicObject(S_Libra
rySession.java:6407)
javawebserver: at oracle.ifs.beans.LibrarySession.DMNewPublicObject(LibrarySes
sion.java:6913)
javawebserver: at oracle.ifs.beans.LibrarySession.NewPublicObject(LibrarySessi
on.java:4564)
javawebserver: at oracle.ifs.beans.LibrarySession.createPublicObject(LibrarySe
ssion.java:2562)
javawebserver: at oracle.ifs.utils.common.PublicObjectUtilities.createDocument
(PublicObjectUtilities.java:537)
javawebserver: at oracle.ifs.utils.common.PublicObjectUtilities.putAsDocumentW
ithVersioning(PublicObjectUtilities.java:163)
javawebserver: at oracle.ifs.adk.filesystem.IfsFileSystem.createDocument(IfsFi
leSystem.java:922)
javawebserver: at dp.DPDocManager.uploadDocument(DPDocManager.java:374)
javawebserver: at ifs.jsp_sbin._dp._dpDoc._jspService(_dpDoc.java:115)
javawebserver: at oracle.ifs.protocols.http.jsp.pagecompile.jsp.runtime.HttpJs
pBase.service(HttpJspBase.java:94)
javawebserver: at javax.servlet.http.HttpServlet.service(Compiled Code)
javawebserver: at oracle.ifs.protocols.http.jsp.IfsJspServlet.runServlet(IfsJs
pServlet.java:865)
javawebserver: at oracle.ifs.protocols.http.jsp.IfsJspServlet.processJspPage(C
ompiled Code)
javawebserver: at oracle.ifs.protocols.http.jsp.IfsJspServlet.service(IfsJspSe
rvlet.java:240)
javawebserver: at javax.servlet.http.HttpServlet.service(Compiled Code)
javawebserver: at com.sun.server.ServletState.callService(ServletState.java:22
6)
javawebserver: at com.sun.server.ServletManager.callServletService(ServletMana
ger.java:936)
javawebserver: at com.sun.server.ProcessingState.invokeTargetServlet(Processin
gState.java:423)
javawebserver: at com.sun.server.http.HttpProcessingState.execute(HttpProcessi
ngState.java:79)
javawebserver: THE ERROR MESSAGE IS IFS-30002: Unable to create new LibraryObje
ct
javawebserver: Setting permissions for the document....
javawebserver: setting the access level
javawebserver: at com.sun.server.http.stages.Runner.process(Runner.java:79)
javawebserver: at com.sun.server.ProcessingSupport.process(Compiled Code)
javawebserver: at com.sun.server.Service.process(Service.java:204)
javawebserver: at com.sun.server.http.HttpServiceHandler.handleRequest(HttpSer
viceHandler.java:374)
javawebserver: at com.sun.server.http.HttpServiceHandler.handleRequest(Compile
d Code)
javawebserver: at com.sun.server.HandlerThread.run(Compiled Code)
javawebserver:
javawebserver:
javawebserver: Error during JSP page processing: /ifs/jsp-bin/dp/dpDoc.jsp
javawebserver: java.lang.NullPointerException
The Code is :
package dp;
import oracle.ifs.beans.*;
import oracle.ifs.common.*;
import oracle.ifs.beans.parsers.*;
import oracle.ifs.adk.security.*;
import oracle.ifs.adk.filesystem.*;
import java.io.*;
import java.util.Locale;
import javax.servlet.http.*;
* The document manager bean for the Deal Planner app.
* <p>
* This class provides a login session/creates a new account in the IFS. The class
* implements the <code>IfsHttpLogin</code> interface so it can share login data with other
* beans.
* @author Srinivas Sampige
* @version 1.0
* @see IfsHttpLogin
public class DPDocManager implements IfsHttpLogin
private String userName = "";
private LibrarySession ifsSession = null;
private FolderPathResolver fPathResolver = null;
private IfsFileSystem ifsFileSystem; // File System object
public DPDocManager()
{//does nothing
*Creates a new account in the IFS for
*a new deal when the deal code is passed in.
*@ param dealCode The deal code of the deal for which an account has to be created
*@ param password A system generate d password for the account being created.
*@ return String Will return "SUCCESS" on creating the account or the reason if an
* error occurrs.
public String createDealFolder(String dealCode)
String result = "SUCCESS";
try
ifsSession = getIfsConnection("system","manager","ServerManager","i5ifs");
ifsSession.setAdministrationMode(true);
//create a new folder for this deal
Folder dealFolder = createFolder("/home",dealCode);
//create a group for this deal;place the group as
//an access control entry in an access control list.
//Set the access control list to the folder.
AccessControlList acl = createDealGroup(dealCode);
dealFolder.setAcl(acl);
ifsSession.setAdministrationMode(false);
}catch(IfsException ie)
int code = ie.getErrorCode();
System.out.println("THE ERROR CODE WHILE CREATING DEAL FOLDER IS -- "+code);
ie.printStackTrace();
result = ie.getMessage();
return result;
}//createDealFolder
public String createUser(String userId,String password,String dealCode)
String result = "SUCCESS";
System.out.println("Creating user and adding to a group "+userId);
try
this.ifsSession = getIfsConnection("system","manager","ServerManager","i5ifs");
ifsSession.setAdministrationMode(true);
System.out.println("Logged in successully");
//form the XML necessary for creating the simple user;
//the new user in the IFS will be the Deal.User id will be the deal code;
//password is fetched from the DEALS table.
String simpleUserString = "<?xml version = '1.0' standalone = 'yes'?>\n"
+ "<SimpleUser>\n"
+ " <UserName>"+userId+"</UserName>\n"
+ " <Password>"+userId+"</Password>\n"
+ " <HomeFolderRoot>/home</HomeFolderRoot>\n"
+ "</SimpleUser>\n";
System.out.println("Parsing "+simpleUserString);
//invoke the XML parser for creating the new user
StringReader userDefinition = new StringReader(simpleUserString);
SimpleXmlParser xmlParser = new SimpleXmlParser(ifsSession);
xmlParser.parse(userDefinition,null,null);
//a valid user for a deal must belong to the deals group;add the user
//to the appropriate group for the deal
String userToGroupString = "<?xml version = '1.0' standalone = 'yes'?>\n"
+ "<DirectoryGroup>\n"
+ " <Update reftype='Name'>" + dealCode+"Group" + "</Update>\n"
+ " <Members>"
+ " <Member reftype='Name'>" + userId + "</Member>"
+ " </Members>"
+ "</DirectoryGroup>\n";
//invoke the XML parser for adding the new user to the group
StringReader groupUpdate = new StringReader(userToGroupString);
xmlParser = new SimpleXmlParser(ifsSession);
LibraryObject lo = xmlParser.parse(groupUpdate,null,null);
System.out.println ("The LO returned by parse is " + lo);
//link this user's home folder to the deal folder
Collection c = ifsSession.getDirectoryUserCollection();
DirectoryUser du = (DirectoryUser) c.getItems(userId);
System.out.println("The DirectoryUser created is " + du.getDistinguishedName());
//Folder homeFolder = (Folder) getIfsFileSystem().findPublicObjectByPath("/home/"+dealCode);
Folder homeFolder = du.getPrimaryUserProfile().getHomeFolder();
System.out.println("Home folder is"+homeFolder);
homeFolder.addItem((Folder)getIfsFileSystem().findPublicObjectByPath("/home/"+dealCode));
System.out.println("Created a link to the deal folder... ");
ifsSession.setAdministrationMode(false);
}catch(IfsException ie)
IfsException.setVerboseMessage(true);
ie.printStackTrace();
return result;
}//public
/* public String addUserToGroup(String groupName)
try
InternetFileSystem ifs = getFileSystem();
ifs.findPublicObjectByPath(goupName);
}catch(IfsException ie)
ie.setVerboseMessage(true);
System.out.println("Problem while adding user to the group "+ie.getMessage());
ie.printStackTrace();
}//addUserToGroup
*This method creates a group that for a particular deal.
*All members having access to this deal must belong to thi                                                                                                            s
* group.
public AccessControlList createDealGroup(String dealCode)
AccessControlList acl = null;
try
DirectoryGroupDefinition def = new DirectoryGroupDefinition(ifsSession);
def.setAttribute("NAME",AttributeValue.newAttributeValue(dealCode+"Group"));
DirectoryGroup dealGroup = (DirectoryGroup)ifsSession.createPublicObject(def);
AccessControlListDefinition aclDef = new AccessControlListDefinition(ifsSession);
AccessControlEntryDefinition aceDef = new AccessControlEntryDefinition(ifsSession);
AccessLevel aLevel = new AccessLevel();
aLevel.enableAllStandardPermissions();
aLevel.disableStandardPermission(AccessLevel.ACCESSLEVEL_ADDITEM);
aLevel.disableStandardPermission(AccessLevel.ACCESSLEVEL_CREATE);
aLevel.disableStandardPermission(AccessLevel.ACCESSLEVEL_ALL);
aceDef.setGrantee(dealGroup);
aceDef.setDistinctAccessLevel(aLevel);
aclDef.addAceDefinition(aceDef);
acl = (AccessControlList) ifsSession.createPublicObject(aclDef);
acl.setName(dealCode+"ACL");
}catch(IfsException ie)
System.out.println("error while creating group for deal");
IfsException.setVerboseMessage(true);
ie.printStackTrace();
return acl;
}//createUser
*makes a connection the the IFS and returns the LibrarySession object.
*@param userName user name for a valid IFS account.
*@param password password for a valid IFS account.
*@param serviceName the IFS service name.
*@param schemaPassword the IFS schema password.
private LibrarySession getIfsConnection(String username, String password, String serviceName,
String schemaPassword) throws IfsException
LibraryService service = new LibraryService();
CleartextCredential me = new CleartextCredential(username, password);
ConnectOptions connection = new ConnectOptions();
connection.setLocale(Locale.getDefault());
connection.setServiceName(serviceName);
connection.setServicePassword(schemaPassword);
ifsSession = service.connect(me, connection);
fPathResolver = new FolderPathResolver(ifsSession);
ifsFileSystem = new IfsFileSystem(ifsSession);
return ifsSession;
}//getIfsConnection()
public String loginToIfs(String userName,String password,String serviceName,String schemaPassword)
String result = "SUCCESS";
try
getIfsConnection(userName,password,serviceName,schemaPassword);
this.userName = userName;
//getResolver().setHomeFolder("/home/"+userName);
}catch(IfsException ie)
int code = ie.getErrorCode();
System.out.println("ERROR CODE "+code);
result = "FAILED -- "+code+" -- "+ie.getMessage();
System.out.println("Failed to login "+ie.getMessage());
ie.printStackTrace();
return result;
}//loginToIfs
public LibrarySession getSession()
return ifsSession;
}//getSession()
public FolderPathResolver getResolver()
return fPathResolver;
public IfsFileSystem getIfsFileSystem()
return ifsFileSystem;
public Folder getHomeFolder()
Folder homeFolder = null;
try
DirectoryUser user = ifsSession.getUser();
System.out.println("Got the user");
PrimaryUserProfile primary = user.getPrimaryUserProfile();
System.out.println("got the primary user profile");
homeFolder = primary.getHomeFolder();
System.out.println("THE HOME FOLDER IS --> "+homeFolder);
System.out.println("The home folder name is --> "+homeFolder.getName());
}catch(IfsException ie)
ie.printStackTrace();
System.out.println("home folder");
return homeFolder;
}//getHomeFolderPath()
* Called when this object is bound to the HTTP session object.
* @param event The event when the object is bound to the Http session.
public void valueBound(HttpSessionBindingEvent event)
// do nothing
* Called when this object is unbound from the HTTP session object.
* @param event The event when the object is unbound to the Http session.
public void valueUnbound(HttpSessionBindingEvent event)
//release the reources like the ifsSession etc.
fPathResolver = null;
try
if (ifsSession != null)
ifsSession.di sconnect();
}catch (IfsException e)
e.printStackTrace();
finally
ifsSession = null; // release the resources
}//valueUnbound()
public Folder createFolder(Folder destinationFolder,String theNewFolderPath)
Folder createdFolder = null;
try
System.out.println("<*---*> IN THE FOLDER "+destinationFolder);
IfsFileSystem ifs = getIfsFileSystem();
System.out.println("Creating the folder..");
createdFolder = ifs.createFolder(theNewFolderPath,destinationFolder,true,null);
System.out.println("Created the folder..");
}catch(IfsException ie)
System.out.println("ERROR CREATING A FOLDER IN THE DESTINATION FOLDER");
IfsException.setVerboseMessage(true);
ie.printStackTrace();
return createdFolder;
}//createFolder(String inTheFolder,theNewFolder)
public Folder createFolder(String inTheFolder,String theNewFolderPath)
Folder createdFolder = null;
try
System.out.println("<*---*> IN THE FOLDER "+inTheFolder);
IfsFileSystem ifs = getIfsFileSystem();
System.out.println("Creating ANOTHER folder for test");
Folder destinationFolder = (Folder) ifs.findPublicObjectByPath("/"+inTheFolder);
System.out.println("The destination folder is "+destinationFolder);
/* Folder destinationFolderMyTest = (Folder) ifs.findPublicObjectByPath("/home/c6/COREL/MY-TEST/");
System.out.println("The destination folder my test is "+destinationFolderMyTest);*/
createdFolder = ifs.createFolder(theNewFolderPath,destinationFolder,true,null);
/* System.out.println("Created folder in destination folder ");
createdFolder = ifs.createFolder(theNewFolderPath,(Folder) ifs.findPublicObjectByPath(inTheFolder),true,null);
System.out.println("Created folder in MY-TEST ");*/
}catch(IfsException ie)
System.out.println("ERROR CREATING A FOLDER IN THE DESTINATION FOLDER");
IfsException.setVerboseMessage(true);
ie.printStackTrace();
return createdFolder;
}//createFolder(String inTheFolder,theNewFolder)
*Method creates a folder in the path specified(the path includes the name of the folder
*to be created).If a parent of any of the folders in the path
*is not found then that folder is automatically created.
public String createFolder(String folderPath)
System.out.println("*-*-*-*-* Creating folder *-*-*-*-*");
String result = "SUCCESS";
try
//ifsSession.setAdministrationMode(true);
IfsFileSystem ifs = new IfsFileSystem(ifsSession);
Folder folder = (Folder) ifs.findPublicObjectByPath("home/"+userName);
ifs.createFolder(folderPath,(Folder) folder,true,null);
}catch(IfsException ie)
result = ie.getMessage();
ie.printStackTrace();
return result;
}//createFolder
//Upload a document to the ifs
public Document uploadDocument(String localPath,String destinationPath)
Document document = null;
try
IfsFileSystem ifs = new IfsFileSystem(ifsSession);
FileInputStream fis = new FileInputStream(localPath);
System.out.println("**********Creating document in "+destinationPath);
document = ifs.createDocument("B.txt", fis, destinationPath, null, false, null);
System.out.println("Created document..");
}catch(IfsException e)
System.out.println("Error while creating document.....");
IfsException.setVerboseMessage(true);
e.printStackTrace();
System.out.println("THE ERROR MESSAGE IS "+e.getMessage());
catch(Exception e)
System.out.println("File not found/io exception ");
e.printStackTrace();
return document;
}//uploadDocument
* Adds an access control entry to the public object passed in.
*@param PublicObject the publicObject for which permissions have to be set.
public void setAccessControlOnObject(PublicObject publicObject)
try
System.out.println("Setting permissions for the document....");
AccessControlListDefinition aclDef = new AccessControlListDefinition();
aclDef.setName(publicObject+"ACL");
AccessControlEntryDefinition aceDef = new AccessControlEntryDefinition();
//this sets the acceess control entry's granntee as the "user" who ha s loggen on
aceDef.setGrantee(ifsSession.getDirectoryUser());
aceDef.enableGrantToWorld(false);
String[] permissions = {"ACCESSLEVEL_NONE"};
System.out.println("setting the access level");
AccessLevel accessLevel = new AccessLevel(permissions);
/*PermissionBundleDefinition pbDef = new PermissionBundleDefinition(ifsSession);
PermissionBundle pb = (PermissionBundle) ifsSession.createSystemObject(pbDef);
pbDef.setAccessLevel(accessLevel);
pbDef.setAccessLevel(accessLevel);
aceDef.addPermissionBundle(pb);*/
aceDef.setDistinctAccessLevel(accessLevel);
aclDef.addAceDefinition(aceDef);
AccessControlList acl = (AccessControlList) ifsSession.createPublicObject(aclDef);
publicObject.setAcl(acl);
}catch(IfsException ie)
System.out.println("The error while settin access control is -0> "+ie.getMessage());
ie.setVerboseMessage(true);
ie.printStackTrace();
}//createAccessControlList
}//class DPDocManager
Note : since iam still experimenting with the code please ignore any irrelevant/wrong commenting.Iam using method "CreateDealFolder()" to create the folder "INPRISE" and "CreateUser()" to create users "i1","i2"

Answer 1

Iam not able to set the main folder's (i.e INPRISE) acl (MyAcl) on the subfolder "MyFolder" because the owner of MyAcl is "system" whereas the owner of MyFolder is user "i1" .Which is the best way of solving these ownership issue which iam running into ? I want to be able to create different folders ,assign a group of uers to each of the folders who can create as well as modify,delete each other's folders/documents (as i have mentioned in my first post in this thread) ?
thanks
Srinivas