Retrieving source one archived email - you do not have permission to access the
item
Hi,
I have a user who has full access to a shared mailbox via outlook and editor delegate permissions. However, when attempting to access archived email from this mailbox, source one gives the following error when clicking on any of the 3 available links:
Unable to open the file. You do not have permission to access this item.
I have set myself up with the same permissions and delegate rights and also receive this error. Source one client version is 6.7.2, outlook version is 2010, windows 7 on the desktop. The same permissions work fine on another shared mailbox.
I think YOu have run might have run into a situation I have spent some time investigating.
Most likely the emails that the user is trying to open are emails which where moved in shortcuttet form into the shared mailbox. This could happen like this:
UserA has shortcuts in the mailbox and a faulting or not installed Offline Access Client and moves the shortcuttet email into the shared mailbox. UserB has all the right access to the shared mailbox and ven the mapped folder in SourceOne, but the opening of the shortcuttet email will fail, because the userB has no owner permisssion to the shortcuttet email.
Try the following:
Restore the shortcut in the shared mailbox, by running a restore shortcut task against the shared mailbox.
Then shortcut the shared mailbox again and see if userb can open the emails.
Rearchiving or updating the shortcuts will not help - only the procedure above.
I'm trying to explain the problem to EMC and to get them make a solution for it...
When you check the permissions over the shared mailbox do you see any SID displayed instead of username from AD? If an SID is not being enumerated/linked to an existing object in AD that would have potential to cause problem for the call they goes in to find the permissions over the shared mailbox. If you see SID instead of username try by recording the SID and removing it from mailbox permissions set.
If it does not help, I would suggest you to engage EMC SourceOne support.
There is no SID and I would have been suspicious if there had been. The fact that other shared mailboxes open fine with exactly the same permissions is a mystery. I’ve engaged SourceOne support. Thanks for the advice though. Appreciated ☺
It is a situation I have seen at several different costumer sites, even though they are running with the Offline Access Client. Some of them has been moved as shortcuttet emails because the Offline Access client in the beginning didn't restore emails when they where moved between folder or mailboxes. This feature was implemented later and the GPO setting for the client called "Copy/restore" likewise.
I have reproduced the situation in my lab and can easily show You the situation.
tlarsen1
17 Posts
5853
0
Posted October 18th, 2012 04:00
Hi There.
I think YOu have run might have run into a situation I have spent some time investigating.
Most likely the emails that the user is trying to open are emails which where moved in shortcuttet form into the shared mailbox. This could happen like this:
UserA has shortcuts in the mailbox and a faulting or not installed Offline Access Client and moves the shortcuttet email into the shared mailbox. UserB has all the right access to the shared mailbox and ven the mapped folder in SourceOne, but the opening of the shortcuttet email will fail, because the userB has no owner permisssion to the shortcuttet email.
Try the following:
Restore the shortcut in the shared mailbox, by running a restore shortcut task against the shared mailbox.
Then shortcut the shared mailbox again and see if userb can open the emails.
Rearchiving or updating the shortcuts will not help - only the procedure above.
I'm trying to explain the problem to EMC and to get them make a solution for it...
Regards
Thomas