IE issue with "Updating security roles"

[pejbx]

I zipped it. [file name=open_km_error.zip size=19861]http://www.openkm.com/images/fbfiles/fi ... _error.zip[/file]

[wailadd]

Hi all,

seems to be a security issue related to the access granted on the document directory.

I had the same problem and changed the following:

1. In the Taxonomy window select the directory in question.
2. Click on the securit TAB on the bottom right window.
3. click on the \"Update\" button between the list of documents and the admin area (see picture).



Ensure both admin and the user role have read/write permission to the directory.

That solved the issue.

Cheers.

[wailadd]

Hi all,

seems to be a security issue related to the access granted on the document directory.

I had the same problem and changed the following:

1. In the Taxonomy window select the directory in question.
2. Click on the securit TAB on the bottom right window.
3. click on the \"Update\" button between the list of documents and the admin area (see picture).



Ensure both admin and the user groups as well as any users have at least read, if not read/write permission to the directory.

That solved the issue.

Cheers.

[jllort]

Hi pejbx,

You\'ve got a logout option on administration, for this purpose.

About decreasing timeout, Openkm fires each 15 minutes simulating a operation to server to not losing session ( preventing user stop using UI during some time, but not losing session, that\'s the idea ). If you decrease time out lower 15 minutes some users after 15 minutes inactive it\'ll losing session.

I think it\'s better you trying login out from administration view, than decreasing session. If you want I tell how to decrease session, put other post ( I don\'t want to merge in this ).

[jllort]

Hi wailadd

UserRole must not be propagated to repository because all users must have it role ( mandatory for connection ), ans then security it\'ll have not sense ( because all users it\'ll have grants for all ).

When you starting OpenKM from administration firt time you must consider removing this role from taxonomy ( root repository folder ) to not propagate to new nodes.

[jllort]

Hi ribizli,

I\'ll trying this issue, problem is when document has some property no ? and you want to accessing directly across direct link, i\'ll testing this case.

[ribizli]

Yes, it is.

[pvervoo]

Hello

I have the same problem, with Internet Explorer v 6.0 on XP Pro SP2.
There is no problem with folders under okm:root, but if you create a subfolder, and you try to access it, then the problem arises.

Also the page on the Administration tab is empty !

No problem with Firefox, but we can\'t install Firefox on the shop-floor PC\'s...

Greetings
Philippe

[pejbx]

Below in red is the administrators response:

I admit I don\'t quite understand what to do from here. We already have the program setup and functioning. Should we delete the user role now?

thanks,

\"UserRole must not be propagated to repository because all users must have it role ( mandatory for connection ), ans then security it\'ll have not sense ( because all users it\'ll have grants for all ).

When you starting OpenKM from administration firt time you must consider removing this role from taxonomy ( root repository folder ) to not propagate to new nodes.

[jllort]

This question pejbx it\'ll must be inquired in other threath ( please ), because finally we merged different discussion on same threath (not a good idea ).

Bug confirmed, on mail links, when document has some property group assigned, then property group popup not hidden. I\'ll submit the bug in our tracking system and it\'ll be solved on next OpenKM 4.0 release ( next 1-2 months ).

Thanks for your support.

[jllort]

Bug solved.

[ilagi]

I expereience the same issue of 'Updating security roles" message hanging with IE6 and IE7.

Will the OpenKM version 5.0 be any better?

[jllort]

1- Could you try in our online demo ? I think in version 5.0 it's solved and in 4.1 too ( are you using 4.1 or 4.0 version ? )

2- You can change session timeout, but not lower than 15 minutes it's time configuration that's used to non losing browser session. Take a look on google how to change in web.xml timeout session ( it's easy )

In version 5.0 these parameters can be change by configuration ( browser refreshing time, refreshing dashboard etc... )

[ilagi]

I'm using 4.1 and IE 6 has this "Updating security roles" issue after opening 3-4 foders. After that I can refresh the site by using the Refresh function of IE and openKM opens, so the user timeout is not an issue, but rather the fact that I cannot get to folders which are 3 folder deep, because 90% of the time after 3 folder openings the "Updating security roles" issue comes up.
I tested with IE 6 from different computers, they are all the same.

I also tested with IE 7, IE 8 and FF and they all seemed to work. Also I tried your 5.0 beta demo on your page with IE 6 and I couldn't reproduce the "Updating security roles" error. I hope it wasn't just my luck.

Is there any way to at least minimize the frequency of this issue? At this point users cannot open level 3 folders with IE 6 at all.

Thanks

[jllort]

IE 6 is a very bad explorer. I recommend upgrading to upper version. OpenKM uses GWT ( google web toolkit ) to building UI. GWT has announced that IE 6 version it'll not be supported for more time because it's really buggy.

All IE family are really horrible browsers, I suggest using other browser ( firefox for example ), if it's not possible try upgrading to 7 or upper IE version