0 votes

Hi I've created a new adaxes configuration and limited access to do things based on the 'actions' section: only create, modify, delete contacts are available.

Added myself to ensure the setup works as desired and logged and performed actions successfully. Note that my account has access to many configurations (refer to this as 'admin account' for below).

Added a new user who doesn't have any other access to Adaxes and after entering their credentials they're presented with

Fatal Error

Failed to get the top level node for the Web Interface. Object 'Company' does not exist.

I presume 'Company' is the OU I have selected.

I tested this out with another brand new user in an incognito browser and receive the same error. If I first log in using the incognito browser as my 'admin account', log off, immediately log in as the test user, they're able to use the interface.

If I clear cookies (or reopen incognito) and log in as the new user the same Fatal error is presented.

I haven't had this with other configurations I've configured. I suspect is the first config I've made since updating to version 3.16.21408.0.

How can I resolve this error? Thanks

by (20 points)
0

My issue was related to the security role: it required 'Allow: Read: User' and 'Allow: Read: Organization unit' in order for the homepage to display.

From the Adaxes console:

Adaxes > %Server% > Configuration > Security roles > %role%

Add two permissions above

Assign to user or security group.

Assigned over = the same OU as specified in the %new onfiguration% > Browsing > Navigation > Top level node.

0

Hello,

That is not quite right. Only one permission is required. A user cannot be specified as top level not as such you only need to delegate the permission to view the Organizational Unit.

1 Answer

0 votes
by (272k points)

Hello,

The issue occurs because the account does not have the permissions to actually see the container specified as top level node for the Web interface. By permissions we mean those granted by Adaxes security roles. For information on how to check/change the container, have a look at the corresponding section of the following tutorial: https://www.adaxes.com/help/PreventUsersFromViewingTheStructure/#change-top-level-node.

Related questions

0 votes
1 answer

First off I have to say that Adaxes is really extraordinary and has been such a massive help to delegate a lot of the day-to-day AD management across mutiple untrusted forests. ... how it functions under the hood, and a lot of SDK documentation left to read.

asked Sep 27, 2023 by McMyers183 (20 points)
0 votes
1 answer

Hi Is it possible to get the Web Interface address via a script? Thanks Matt

asked Oct 13, 2023 by chappers77 (2.0k points)
0 votes
1 answer

I have a web view set up where the user is locked down to only seeing thier approvals. When they get a email notification, and click on the approve or deny link, ... that would grant this access but I am wondering if there is something I am missing.

asked Apr 7, 2023 by mightycabal (1.0k points)
0 votes
1 answer

Hello! I created a new interface but mistakenly abbreviated the virtual path. Can you tell me how I can rename if possible w/o having to recreate? Thanks

asked Jan 17, 2014 by MeliOnTheJob (1.7k points)
0 votes
1 answer

User received email from Lumifi and wanted to verify if legit or if this is not from Adaxes?

asked Nov 30, 2022 by Jeff.Briand (60 points)
3,351 questions
3,052 answers
7,791 comments
545,091 users