WebOffice Permissions

<< Click to show table of contents >>

This chapter gives an overview of the access rights of folder directories on several server environments (e.g. GIS server, Web server, ...) in order to guarantee a trouble free work with WebOffice 10.9 R4.

1) Web Server

Apache Tomcat Webapps:

After the installation of Apache Tomcat Web Server and WebOffice these directories are to be found in the directory .\Tomcat.

Folder name	Users / Permissions	Description	User Manual
.\webapps	Tomcat Service User - Full control permission		Apache Tomcat Installation
.\webapps\<WebOffice application>\WEB-INF\classes\configuration\license	Tomcat Service User - Full control permission	This permission is important to avoid problems that occur at the import of the licence via SynAdmin due to missing authorizations on the file system.	Configure Print templates
.\webapps\<WebOffice application>\output	WebOffice Extension User - Full control permission IUSR User - Full control permission IIS_IUSRS - Full control permission	The WebOffice Output URL is used, to secure access to the WebOffice application when using NLTM. For example the merged images are saved here.	WebOffice
.\webapps\<WebOffice application>\WEB-INF\work\truststore	Tomcat Service User - Full control permission	If Apache Tomcat runs under its own user, then this user must have appropriate permission rights to the path of the Java certificate store. Otherwise the import is cancelled with a corresponding error message.	Import SSL Certificates in SynAdmin

Other Windows Directories:

Folder name	Users / Permissions	Description	User Manual
.\Tomcat_Connector	Read permissions for •IUSR , •Authenticated users, •Network Service	Necessary for Apache Tomcat Connector	Apache Tomcat Connector Installation>
.\Program Files\Java\<OpenJDK folder>	Read permissions for •IUSR , •Authenticated users, •Network Service •Tomcat Service User	Necessary for Apache Tomcat Connector; and for Import SSL/TLS certificates in Java Truststore via SynAdmin	Apache Tomcat Connector Installation Import SSL Certificates in SynAdmin
.\Tomcat\conf	Read permissions for •IIS_IUSRS	Necessary for Apache Tomcat Connector	Apache Tomcat Connector Installation
.\inetpub\wwwroot\User Management AdminWeb\tmp	Full control permission for •IUSR, •IIS_IUSRS, •Network Service	User Management Admin Web – Access for IUSR to show UM Reports	Configure virtual directory
.\<UMDB_SQLite Verzeichnis>	Full control permission for •IUSR •Network Service	When using SQLITE: For WebOffice usermanagement permissions to open the database are required and at least the role Network Service and IUSR must have full control permission to the specified SQLite file.	SQLITE Connection Parameter

2) GIS Server

ArcGIS Server Site:

After the Installation of ArcGIS Server and WebOffice these directories can be found in the directory .\arcgisserver\directories.

Folder name	Users / Permissions	Description	User Manual
.\arcgisoutput	•ArcGIS Server Service User - Full control permissions •WebOffice Extension User - Full control permissions	Output of Plot or ePaper in the WebOffice Client	WebOffice Extensions
.\ServiceDocuments\SynOutputService	•ArcGIS Server Service User - Full control permissions	Markup Function	Publish the SynOutputService
.\WebOfficeDataShare	•ArcGIS Server Service User - Full control permissions , •WebOffice Extension User - Full control permissions •Apache Tomcat Service User - Read and write permissions	In some cases (e.g. WebOffice plotting or WebOffice ePaper) the GIS-Server memory capacity can be overloaded, if the Server Object Extension has to process too much data. To avoid these peaks, a Data Share can be configured.	List of Data Share Directories
.\WebOfficeePaperTemplates	•ArcGIS Server Service User -Full control permissions, •WebOffice Extension User - Full control permissions	ePaper Function (Access to Templates)	WebOffice Extensions
.\WebOfficeExport	•ArcGIS Server Service User -Full control permissions, •WebOffice Extension User - Full control permissions	Export Function (Access to Templates)	WebOffice Extensions
.\WebOfficeGeoprocessing	•ArcGIS Server Service User - Full control permissions	Geoprocessing	Acticate Geoprocessing
.\WebOfficeLayerFiles	•ArcGIS Server Service User - Full control permissions •Tomcat Server Service User - Full control permissions	LayerFiles	Simple thematic Mapping
.\WebOfficePlotTemplates	•ArcGIS Server Service User - Full control permissions, •WebOffice Extension User - ArcGIS Server Service user	Plot Function (Access to Templates)	WebOffice Extensions
.\WebOfficeSystem	•ArcGIS Server Service User - ArcGIS Server Service user	System files for WebOffice extensions Function	Deploy WebOffice files on ArcGIS Server
.\WebOfficeUpload	•ArcGIS Server Service User - Full control permissions, •IUSR - Full control permissions	This directory is necessary for the upload of georeferenced images in WebOffice. To display these images, which are saved in the WebOfficeUpload-directory, in WebOffice a Virtual Directory has to be created in the Internet Information Sevices (IIS) Manager.	Activate Upload of geotagged images

See chapter The ArcGIS Server Account in the Esri Online Manual for further information on the ArcGIS Server Service User.

Other Windows Directories:

Folder name

Users / Permissions

Description

C:\Windows\Temp

WebOffice Extension User - Full control permissions

Is needed to compile code.

.\ORACLE\product\<Version>\client\network\admin\tnsnames.ora

WebOffice Extension User - Full control permissions

IIS_IUSRS - Full control permissions

The WebOffice Extension user must be authorized by Oracle so that the data can be displayed for printing correctly.

If the access rights are not sufficient, it is recommended to add the WebOffice extensions user to the local Windows administration group.

.\*.fgdb

ArcGIS Server Service User - Full control permissions

Local data like fGDB etc., which are using map services.

GEONIS Server:

When using GEONIS Server from Geocom, the following authorizations must be considered:

Folder name	Users / Permissions	Description
.\GEONISSERVER\geonis<Version>	ArcGIS Server Service User - Reading permissions
.\GEONISSERVER\geonis<Version>\GEONISConfiguration	ArcGIS Server Service User - Reading- and writing permissions, WebOffice Extension User - Reading- and writing permissions	WebOffice Extension User: Reading- and writing permissions, to query data, in case the data is saved in a FGDB.
.\GEONISSERVER\geonis<Version>\logs	IIS_IUSRS - Reading- and writing permissions ArcGIS Server Dienst User - Reading- and writing permissions
.\GEONISSERVER\geonis<Version>\temp	ArcGIS Server Service User - Reading- and writing permissions

Please note the compatibility between Geonis Server and WebOffice in the Geocom user manual.