DCM4CHEE, Conquest, Study Permissions

[Rüdiger]

Hi all,

does anybody know how to implement DCM4CHEE Study Permissions upon studies retrieved from Conquest? I can't get it to work, I tried http://www.dcm4che.org/confluence/display/ee2/Configuration+of+Study+Permissions+%28Role+Based+Access+Control%29 and some other hints from this group, but without any success.

I have a couple of Conquest Servers (one server per Doctor) that are all able to send their studies without any problems to DCM4CHEE. If I enable the Web UI Study Permission Check and configure the series-permission.xsl, the related Doctor in DCM4CHEE doesn't see any of his studies.

Any hint will be appreciated. I am using v2.17.

[Rüdiger]

To be more precise:

• Table: study_permission: Permissions are set on retrieve of the DICOM images, and related to role "Doctor"
  
• Flag "DICOM" set to role "Doctor" in WebInterface
  
• User "x" with role "Doctor" and "WebUser" created
• User "admin" is able to get all studies in WebInterface, user "x" does not get any study at all
• Enabled "useStudyPermissions" in service=WebConfig
  

This is my series-permission.xsl (I assume it is correct):

<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
 
  <xsl:output method="xml"/>
 
  <!-- params are overwritten by application with
  current values -->

  <!--
  calling: applied on SeriesStored event to
  facilitate grant/revoke of study permissions
  dependent on the identity of the Storage SCU
  from which the Series was received -->
  <xsl:param name="calling" select="'DEFAULT'"/>

  <xsl:template match="/dataset">

    <permissions>
      <!-- A=Append, D=Delete, E=Export, Q=Query,
      R=Read/Show, U=Update/Edit -->
      <xsl:choose>
          <xsl:when test="$calling='CONQUESTSRV1'">
              <grant role="Doctor" action="Q,E,U,D,R,A" suid="{attr[@tag='0020000D']}"/>
          </xsl:when>
          <xsl:otherwise>
              <!-- grant access to WebUser per default -->
              <grant role="WebUser" action="Q,E,U,D,R,A" suid="{attr[@tag='0020000D']}"/>
          </xsl:otherwise>
      </xsl:choose>
    </permissions>

  </xsl:template>
</xsl:stylesheet>

[Rüdiger]

And this is an output of my server.log file - do I have to reconfigure DCM4CHEE to bind to a specific IP for the StudyPermissionHelper instead of 0.0.0.0?

2015-03-16 09:37:05,857 DEBUG -> (http-0.0.0.0-80-2) [org.jboss.monitor.services.ActiveAlarmTable] Got notification (#679): org.jboss.monitor.alarm.AlarmNotification [ type=jboss.alarm.logging, source=jboss.system:service=Logging,type=JMXNotificationAppender, target=null, severity=MAJOR, alarmState=NONE, sequenceNumber=128, timeStamp=1426495025856, message=2015-03-16 09:37:05,856 ERROR [org.dcm4chee.web.war.StudyPermissionHelper] org.dcm4chee.web.war.StudyPermissionHelper:
java.net.ConnectException: Connection refused
    at java.net.PlainSocketImpl.socketConnect(Native Method)
    at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339)
    at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200)
    at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182)
    at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
    ...