Sufficient file permissions are not available

[ImmortalLogic]

I have only seen one other article regarding this error message. We recently purchased the AbleCommerce 9 version (replacing the old version 7)--doing a fresh install on Windows Server 2012/IIS 8. We are running into a an error that may be related to a permissions issue that we cannot solve.

When launching the Default.aspx file located in the Install folder, we receive this error/message under the Permissions Installation Test:

"Sufficient file permissions are not available for AbleCommerce to install or run properly. Ensure that the specified process identity has permission to the specified folders and files. All tests should pass before installation completes.
Process Identity:
Test Results:
"

We have checked the Application Pool settings; we have given rights to the NETWORKSERVICE account. Not sure what else we need to do. I thought about changing the Identify to ApplicationPoolIdentity but not sure if this will resolve. Our previous store was running on this same server with the same set up. I will re-check everything but if anyone has an idea or something that I can try, please let me know.

Thanks in advance!

[Katie]

Try this -

1. Right-click on the root folder for AbleCommerce.
2. Go to properties.
3. Go to the Security tab.
4. Click on Advanced.
5. Select the option to "Replace all child object permission entries with inheritable permission entries from the object"
6. Click Apply or OK.

I hope that this will work. The instructions might be a little off because I'm working on a different OS, but I get this problem every time I put new files in place. I think the newer versions of Windows are more fussy.

Please let us know if this works.
Katie

[ImmortalLogic]

Thanks Katie. That did not work. I provided the same permissions from the root all the way down, restarted IIS, rebooted. Do you believe this is related to MIMEType? Maybe I need to add a file type? Not sure.

It is difficult to tell what is going wrong. I have never installed your store before and the instructions seem fairly simple. Based on the error it seems as if it is a permissions error/issue on my end. However, I cannot seem to figure it out. Was hoping that you/one of your clients may have experienced this or know what permissions need to be set to continue with the installation.

Here is a screen shot.

Do you have any other ideas?

Thanks Again.

[AbleMods]

On Server 2012, you have to give your application pool identity permissions to the site folder.

I wrote a short blog article to remind myself, here it is:
http://www.ablemods.com/blog/post/2014/ ... -pool.aspx

[ImmortalLogic]

Thanks AbleMods and Katie. I did this and I am still receiving the same message. I set my website folder as well as the cart folder and permissions to all folders all the the way in. Maybe I am missing something from the blog. When I set the credentials, I am setting it directly on my site folder using my Application Pool name as well as adding IIS APPPOOL\ before the name such as IIS APPPOOL\MyAppPool.

[AbleMods]

Let's double-check a few things:

Check the app pool:
In IIS Manager, click on Application Pools.
Select your app pool and click "Basic Settings" on the far right.
You should see it set to ASP.Net 4.0 and Pipeline Mode set to Integrated.

Check the site setup:
In IIS Manager, click the desired web site to select it.
Now click the Basic Settings link on the far right side.
The app pool you defined above should be the one assigned to the site.
The path to the site should be where you have located the Able site files.

Check the folder permissions:
Using Windows Explorer, find the exact same path as seen above in the IIS website settings
Right click the folder and choose 'Properties'
In the Properties window, choose the Security tab
On the Security tab, click Edit
In the "Permissions for <foldername>" window, make sure you see your app pool name. It won't say "IIS APPPOOL/<poolname>", it'll just list it as "poolname".
If you don't see it, add it as "IIS APPPOOL/<poolname>" It should accept it.
Now click on the pool name in the list to select it.
Check the permissions below. Everything should be checked EXCEPT "Full Control" and "Special Permissions".
Now click the Advanced button.
In the Advanced window, click the checkbox at the bottom "Replace all child object permissions..." blah blah
Once you've checked the checkbox, click the ok buttons to accept it.

Server 2012 will now propagate your security changes to all the site files and folders.

Hit the site with your browser and see how it goes.

[NC Software]

It's the same as AC 7 so this doc still applies, not sure why Able never moved or copied this up for GOLD.

http://help.ablecommerce.com/index.htm# ... erce_7.htm

Edit: Joe, I suggest review what you suggested, I do not agree with your post, it is a security risk esp with WSS solutions and permissions need to be set carefully as outlined by Able.

[AbleMods]

The OP asked for help with a file permissions issue in a Server 2012 environment. The steps provided are exactly how you establish folder permissions in Server 2012 for an ASP.Net application.

The full extent of implementing .Net application hosting in a secured environment was not within the scope of the OP question.

[Katie]

Joe,

Thanks. It's really great that you have spent so much time helping "ImmortalLogic" with this permissions issue. It doesn't come up often, so there must be something unique about his 2012 server. I hope that we'll know soon if your latest instructions help. When troubleshooting these kinds of issues, you just have to just get the installation working, and then you can refine permissions to make things more secure. I'm sure there are lots of opinions out there about the best way to do this...

The AbleCommerce permissions for 7 doc is getting quite dated and needs to be re-written for Gold and the newer OS. I look forward to reading your blogs for some assistance in getting the doc updated.

You have always gone the extra mile to help the AbleCommerce community and I think it's a good time to say how much we appreciate it. You are posting helpful responses nearly every day, and we can't thank you enough!

Katie

[NC Software]

I have only seen one other article regarding this error message. We recently purchased the AbleCommerce 9 version (replacing the old version 7)--doing a fresh install on Windows Server 2012/IIS 8. We are running into a an error that may be related to a permissions issue that we cannot solve.

When launching the Default.aspx file located in the Install folder, we receive this error/message under the Permissions Installation Test:

"Sufficient file permissions are not available for AbleCommerce to install or run properly. Ensure that the specified process identity has permission to the specified folders and files. All tests should pass before installation completes.
Process Identity:
Test Results:
"

We have checked the Application Pool settings; we have given rights to the NETWORKSERVICE account. Not sure what else we need to do. I thought about changing the Identify to ApplicationPoolIdentity but not sure if this will resolve. Our previous store was running on this same server with the same set up. I will re-check everything but if anyone has an idea or something that I can try, please let me know.

Thanks in advance!

Don't mess with your application pool settings or any of that nonsense, leave it as ApplicationPoolIdentity NOT NetworkService. Make sure your folders where your web site is stored on disk have the correct IIS accounts assigned such as IUSR and IIS_IUSRS. For any of the folders that require WRITE permissions grant Modify to IIS_IUSRS. I run 2012 R2 and am very familiar with it. You may have ended up in a permissions mess now and you may want to delete or reset your folder structure or you could end up in a very bad security situation if you use WSS where a hacker could WRITE files in to your folder structure if permissions are wrong and then they will compile and allow execution. This is why I do not run nor endorse the WSS model and choose the WSP model for security. Your server should also have ASP or any type of scripted pages disabled around e-commerce operations.

If you're not well versed in IIS and server setup such as the accounts required here is an article that may help you understand:

http://www.iis.net/learn/get-started/pl ... nts-in-iis

[ImmortalLogic]

I apologize. I have been away for a few days. I attempted AbleMods solution and I got stuck for a while because I deleted the folder permission and when I added it again I could not add the IIS APPPOOL and pool name. Then I referred to AbleMod's original article and realized that it should be set as "IIS APPPOOL\<poolname>" and not "IIS APPPOOL/<poolname>"

Once I correct this, the poolname was accepted. However, the issue still did not resolve.

I will try NC Software's solution next. I will let you all know how it goes.

Thanks for your time and patience!!!

[ImmortalLogic]

First, I would like to thank all of you for your quick and thorough assistance. Next, I would like to say that the issue had nothing to do with any of my permissions... I made an idiot mistake and was loading the Default.aspx (install file) through the file system instead of over HTTP.

Had
D:\inetpub\wwwroot\mywebsite.com\cart\Install\Default.aspx

When it should have been:
https://www.mywebsite.com/cart/Install/Default.aspx

I was not able to identify the issue when running through IE but in Firefox, I received this error message and realized my mistake.
XML Parsing Error: not well-formed
Location: file:///D:/inetpub/wwwroot/mywebsite.com/cart/Install/Default.aspx

Thanks for your help and great support. My issue is resolved.

[AbleMods]

I've had days like that

Glad you got it worked out....