Recursive permissions on public folders fail

freiser

We have successfully migrated the directory structure of a public folder with the script “kopano2grommunio.sh” from Kopano to Grommunio. However, we have problems to set the permissions for this directory structure as described in the article:

https://community.grommunio.com/d/391-offentliche-ordner-nach-migration-haben-keine-berechtigungen-fehlen-in-outlook

We assign new permissions at the top level in the Admin UI and then want to adjust the permissions again in the web client using the option “Apply (copie) chaged permissions recursively”. We get the error:

What are we doing wrong or is this a bug?

Br
Frank

crpb

Take a look in the admin-ui at domains->public folders

you can set permissions in there

EDIT: did you give the person/group enough rights on the sublevels and root?
Maybe show which permissions they have.

You can look at them like this via cli which might be easier than going through any windows via outlook/web..

grommunio-admin exmdb domain.tld folder list
grommunio-admin exmdb domain.tld permissions $ID

freiser

Admin UI:
We had used the menu item and adjusted the rights of the top folder there.

We have now looked with the CLI:

grommunio-admin exmdb xxxx-xxxx.de folder list

IPM_SUBTREE (0x2)
- 01_HJ_public (0x50000)

Below “01_HJ_oeffentlich” there are approx. 2500 folders in a structure.
We have queried the rights of the folder “01_HJ_oeffentlich” with

grommunio-admin exmdb xxxx-xxxx.de folder permissions 0x50000

administrator@xxxx-xxxx.de 0x07fb (readany,create,editowned,deleteowned,editany,deleteany,createsubfolder,folderowner,foldercontact,foldervisible)

There are 4 other users with the same rights. We have tried to change the rights recursively with one of the five users in the web client now. We get the error mentioned above.

crpb

Hmm..
my user has the same (0x074b) and it works here. But it also has those on 0x2(IPM_SUBTREE).

And running permissions on such a big number or folders i would definitely do from the cli.
https://docs.grommunio.com/man/grommunio-admin-exmdb.html

And if those 4 people are likely to be your admins for those then maybe create a security group for them if it's not already in your ldap and use it instead of setting permissions for each one. That will make it easier for personell changes.

e.g. grommunio-admin exmdb ... folder grant -r 0x2 grp_mbx_admins@foo.tld

crpb

Ok, just tried again and it failed on my recursive permissions via the web-gui.
Need to look deeper at a later time.
At least you now have way to set permissions for now.

EDIT: i also took the libery of renaming this thread as my folders weren't imported from kopano as we didn't have any back then 😛

crpb

After a quick look via my scripts i found that one folder in the list didn't give my user enough rights and so the recursive permission task was likely failing on that particular folder which generated the same error message.
So i strongly recommend setting up that security group permissions and setting them via grommunio-admin at least this once for initial rights.

I also don't see a way to do that via the admin-ui or i'm just blind.
@jschroeder am i correct that it isn't possible to set recursive permissions via the web-admin? and if so maybe that should be integrated?

freiser

Many thanks for the tips. We were able to assign the required rights with the CLI tools and the customer can now work with the public folder structure.

Br
Frank