Navigation:  Administration >

WebOffice Permissions

Previous pageReturn to chapter overviewNext page

This chapter gives an overview of the access rights of folder directories on several server environments (e.g. GIS server, Web server, ...) in order to guarantee a trouble free work with WebOffice 10.8 SP2.

 

1) Web Server

 

Apache Tomcat Webapps:

After the installation of Apache Tomcat Web Server and WebOffice these directories are to be found in the directory .\Tomcat.

Folder name

Users / Permissions

Description

User Manual

.\webapps

Tomcat Service User - Full control permission

 

Apache Tomcat Installation

.\webapps\<WebOffice application>\output

WebOffice Extension User - Full control permission

IUSR User - Full control permission

IIS_IUSRS - Full control permission

The WebOffice Output URL is used, to secure access to the WebOffice application when using NLTM. For example the merged images are saved here.

WebOffice

.\webapps\<WebOffice application>\WEB-INF\work\truststore

Tomcat Service User - Full control permission

If Apache Tomcat runs under its own user, then this user must have appropriate permission rights to the path of the Java certificate store. Otherwise the import is cancelled with a corresponding error message.

Import SSL Certificates in SynAdmin

 

Other Windows Directories:

Folder name

Users / Permissions

Description

User Manual

.\Tomcat_Connector

Read access for

IUSR ,

Authenticated users,

Network Service

Necessary for Apache Tomcat Connector

Apache Tomcat Connector Installation>

.\Program Files\Java\<OpenJDK folder>

Reading- and writing permissions for

IUSR ,

Authenticated users,

Network Service

Tomcat Service User

Necessary for Apache Tomcat Connector; and for Import SSL/TLS certificates in Java Truststore via SynAdmin

Apache Tomcat Connector Installation

Import SSL Certificates in SynAdmin

.\Tomcat\conf

Read access for

IIS_IUSRS

Necessary for Apache Tomcat Connector

Apache Tomcat Connector Installation

.\inetpub\wwwroot\UserManagement AdminWeb\tmp

Full control permission for

IUSR,

IIS_IUSRS,

Network Service

Usermanagement Admin Web – Access for IUSR to show UM Reports

Configure virtual directory

.\<UMDB_SQLite Verzeichnis>

Full control permission for

Network Service

When using SQLITE: For WebOffice usermanagement permissions to open the database are required and at least the role "Network Service" must have full control permission to the specified SQLite file.

SQLITE Connection Parameter

 

 

 

2) GIS Server

 

ArcGIS Server Site:

After the Installation of ArcGIS Server and WebOffice these directories can be found in the directory .\arcgisserver\directories.

 

Folder name

Users / Permissions

Description

User Manual

.\arcgisoutput

ArcGIS Server Service User - Full control permissions

WebOffice Extension User - Full control permissions

Output of Plot or ePaper in the WebOffice Client

 

WebOffice Extensions

.\ServiceDocuments\SynOutputService

ArcGIS Server Service User - Full control permissions

Markup Function

Publish the SynOutputService

.\WebOfficeDataShare

ArcGIS Server Service User - Full control permissions ,

WebOffice Extension User - Full control permissions

Apache Tomcat Service User - Read and write permissions

In some cases (e.g. WebOffice plotting or WebOffice ePaper) the GIS-Server memory capacity can be overloaded, if the Server Object Extension has to process too much data.

To avoid these peaks, a Data Share can be configured.

List of Data Share Directories

.\WebOfficeePaperTemplates

ArcGIS Server Service User -Full control permissions,

WebOffice Extension User - Full control permissions

ePaper Function (Access to Templates)

WebOffice Extensions

.\WebOfficeExport

ArcGIS Server Service User -Full control permissions,

WebOffice Extension User - Full control permissions

Export Function (Access to Templates)

WebOffice Extensions

.\WebOfficeGeoprocessing

ArcGIS Server Service User - Full control permissions

Geoprocessing

Acticate Geoprocessing

.\WebOfficeLayerFiles

ArcGIS Server Service User - Full control permissions

LayerFiles

Simple thematic Mapping

.\WebOfficePlotTemplates

ArcGIS Server Service User - Full control permissions,

WebOffice Extension User - ArcGIS Server Service user

Plot Function (Access to Templates)

WebOffice Extensions

.\WebOfficeSystem

ArcGIS Server Service User - ArcGIS Server Service user

System files for WebOffice extensions Function

Deploy WebOffice files on ArcGIS Server

.\WebOfficeUpload

ArcGIS Server Service User - Full control permissions,

IUSR - Full control permissions

This directory is necessary for the upload of georeferenced images in WebOffice. To display these images, which are saved in the WebOfficeUpload-directory, in WebOffice a Virtual Directory has to be created in the Internet Information Sevices (IIS) Manager.

Activate Upload of geotagged images

 

Note: See chapter The ArcGIS Server Account in the Esri Online Manual for further information on the ArcGIS Server Service User.

 

Other Windows Directories:

Folder name

Users / Permissions

Description

C:\Windows\Temp

WebOffice Extension User - Full control permissions

Is needed to compile code.

.\ORACLE\product\<Version>\client\network\admin\tnsnames.ora

WebOffice Extension User - Full control permissions

IIS_IUSRS - Full control permissions

The WebOffice Extension user must be authorized by Oracle so that the data can be displayed for printing correctly.

Note: 

If the access rights are not sufficient, it is recommended to add the WebOffice extensions user to the local Windows administration group.

.\*.fgdb

ArcGIS Server Service User - Full control permissions

Local data like fGDB etc., which are using map services.

 

GEONIS Server:

When using GEONIS Server from Geocom, the following authorizations must be considered:

Folder name

Users / Permissions

Description

.\GEONISSERVER\geonis<Version>

ArcGIS Server Service User - Reading permissions

 

.\GEONISSERVER\geonis<Version>\GEONISConfiguration

ArcGIS Server Service User - Reading- and writing permissions,

WebOffice Extension User - Reading- and writing permissions

WebOffice Extension User: Reading- and writing permissions, to query data, in case the data is saved in a FGDB.

.\GEONISSERVER\geonis<Version>\logs

IIS_IUSRS - Reading- and writing permissions

ArcGIS Server Dienst User - Reading- and writing permissions

 

.\GEONISSERVER\geonis<Version>\temp

ArcGIS Server Service User - Reading- and writing permissions

 

 

Note: Please note the compatibility between Geonis Server and WebOffice in the Geocom user manual