You are viewing limited content. For full access, please sign in.

Question

Question

Recover permissions to access WF?

asked on May 22, 2024

If all users get removed from the WF permissions and rights page, is there any way to recover access without a re-install?

 

0 0

Answer

SELECTED ANSWER
replied on May 28, 2024

Please use SID of a domain account (e.g. SID of "Everyone" is 0x010100000000000100000000) to add row into database "trustee_security" table.

1 0

Replies

replied on May 22, 2024

Can you provide any more context on what happened for them to be removed?

A re-install won't help as the permissions are stored in Workflow database.

My first thought would be to:

  1. Grab a Workflow database backup from before the permissions were wiped (which you have, right?)
  2. Temporarily install Workflow on some other server
    1. Make sure it can't talk to Laserfiche Server/Forms/etc. with a firewall rule or DNS/hosts file "black hole" to avoid any possible interference with live systems
  3. Restore the Workflow database backup somewhere
  4. Configure the temp Workflow instance to use the restored database
  5. Check the permissions
  6. Manually re-implement the permissions on the Workflow server they were removed from
0 0
replied on May 22, 2024

They were not removed from WF, rather the account(s) that were in there are gone after a domain change, they just cease to exist. I only have an account on the new domain now, so I would need some way to add my new domain account back in. Do I need to manually do this in the database?

0 0
replied on May 22, 2024

It's possible that being a local Administrator on the Workflow server may allow you to add new permissions. Give that a try if you haven't and let me know if it works. We usually have some way like that to avoid you being entirely locked out.

0 0
replied on May 23, 2024

It does not let me add using the WF Administration console. There are windows groups for DS and Audit Trail but I don't see one for WF.

0 0
replied on May 27, 2024
0 0
replied on May 28, 2024

Just tried creating a local administrative user, adding a row for the account into the database, but it still says access denied.

0 0
SELECTED ANSWER
replied on May 28, 2024

Please use SID of a domain account (e.g. SID of "Everyone" is 0x010100000000000100000000) to add row into database "trustee_security" table.

1 0
replied on June 3, 2024

That was what I needed and restored access. I will update the original post.

When you remove Everyone, it does not remove the database entry, it just sets the mask to 8. So you have to update the mask and not insert a new row.

USE [Laserfiche_Workflow]
GO

UPDATE [dbo].[trustee_security]
   SET 
      [mask] = 2147483648
      ,[is_user] = 0
 WHERE [sid] =  0x010100000000000100000000
GO

 

1 0
You are not allowed to follow up in this post.

Sign in to reply to this post.