I've assigned "Start" & "View" permissions to security groups from AD but that does not work for any user within that group.
However, it works only when the individual user account is given the relevant permissions. But that is a temporary workaround since adding individual users from AD, is an administrative overhead.
Any ideas?
Start permissions to AD "Groups" not working
+1
Page 2 / 2
+3
Nope they are not related.
They are two VPCs, and both are facing different problem.
They are two VPCs, and both are facing different problem.
+11
Ok, so this topic is about the 'Start Permission' problem you are experiencing on the K2MEGA (Training) VPC.
Obviously, you're trying to start a new Process Instance...
Is this done through a web page? If so, under what identity is the AppPool the site is running under, started? Have you got a <identity impersonate="true" /> tag in the web site's web.config? If this entry is not in the web.config, the AppPool ID user will not be able to impersonate the user requesting the interaction with K2.net Server.
Also, have you tried giving a certain user within the group explicit Start permissions. Can this user start the process?
Regards,
Ockert
Obviously, you're trying to start a new Process Instance...
Is this done through a web page? If so, under what identity is the AppPool the site is running under, started? Have you got a <identity impersonate="true" /> tag in the web site's web.config? If this entry is not in the web.config, the AppPool ID user will not be able to impersonate the user requesting the interaction with K2.net Server.
Also, have you tried giving a certain user within the group explicit Start permissions. Can this user start the process?
Regards,
Ockert
+9
CO:
Nope they are not related.
They are two VPCs, and both are facing different problem.
I understand what this topic is about however the link (to another post by you) that I have posted in my previous reply looks similar than what we are discussing.
Have a look at the following post: http://forum.k2workflow.com/viewtopic.php?p=2212#2212 - Is this discussion related to the Eccentrix VPC has error opening worklist item issue that you have?
+3
Nope they are not related.
They are two VPCs, and both are facing different problem.
I understand what this topic is about however the link (to another post by you) that I have posted in my previous reply looks similar than what we are discussing.
Have a look at the following post: http://forum.k2workflow.com/viewtopic.php?p=2212#2212 - Is this discussion related to the Eccentrix VPC has error opening worklist item issue that you have?
I am really sorry all the confusion. :oops:
This thread is the problem I face using Training VPC, where I am not able to start a process instance.
The other thread: http://forum.k2workflow.com/viewtopic.php?p=2212#2212 is the problem I have using Eccentrix VPC, where I couldn't open a worklist item.
Both problems are NOT related.
+3
Obviously, you're trying to start a new Process Instance...
Is this done through a web page? If so, under what identity is the AppPool the site is running under, started? Have you got a <identity impersonate="true" /> tag in the web site's web.config? If this entry is not in the web.config, the AppPool ID user will not be able to impersonate the user requesting the interaction with K2.net Server.
Finally no more error when I open my worklist item. And Ockert was right, I need to add this <identity impersonate="true" /> to the web.config.
Thanks for the help.
Cheers
+11
Great stuff!!! Thank you for the feedback. One down, one to go...
Page 2 / 2
Reply
View our Community Site Map
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.