permissions to read properties of your account error

Question

The following error is displayed on the top of the screen, after one of my users logs into Adaxes...

"You don't have any permissions to read properties of your account. Some features of the Web Interface will not be available."

I am not sure what is causing this. I have already set the security role for the user in Adexes to the equivalent of an admin just to test, it made no difference. The user has "Full Control" assigned over "All Objects" for the entire domain. Can someone tell me what is triggering this error and how to resolve it?

Answer 1

Hello,

When assigning permissions, you should always remember that the Deny permissions always override the Allow permissions. That is, if a user has both the Deny and Allow permissions to perform a certain operation, this user will not be able to perform this operation as the Deny permission has a higher priority. So, if the user is assigned both the Allow and Deny permissions for certain properties of his own account, he will not be able to read the properties of his account.

To remedy the issue, you can have a look at the Security Roles assigned to this user and check whether they contain any Deny permissions for reading properties of user accounts and include his own account in the Assignment Scope. To do this:

1. Launch Adaxes Administration Console.
2. In the Console Tree, expand the service node that represents your service.
3. Expand Active Directory.
4. Locate the user you need and select Properties from the context menu.
5. In the Properties dialog box that opens, click the Security Roles tab.
6. In the Security Roles tab, you will see a list of Roles assigned to this user. To view/edit the permissions that the Role contains and its Assignment Scope, you can right-click any Role and select Locate Role in Tree. The Role will be selected in the Console Tree of the Administration Console.