Flex Viewer 3.3 and Access denied for attachments

[PiotrSkworzec]

Hi,

I'm trying to configure and lauch an FV application to work with attachments. First I configured my SDE feature to use attachments. Then I've added some to features.
Then I've created my application, added my features (which is as Feature Service). Everything works it displays ok. But when I'm turning on attachments view and then I'm trying to see theese attachments server throws me an error saying:

Error Server Error - remote server returned an error: (403) Access denied. Code: 500

Why?
All my REST applications runs ok. My site is SSLed, security ON over MSSQL, token correctly configured (logins and passwords works no problem), and ArcGIS Server Manager logs are empty.

[PiotrSkworzec]

I still haven't found an answer.
Is it something with token restrictions? After link click over attachment I'm moved to site

https://mysite.com/ArcGIS/rest/services/MyServices/FS/MapServer/27/95/attachments/96?token=7K4eyWBlaHoIwkz_Cfu2pprK9oaNMb678HJ4w7VelTs.

As I said before, I haven't found any logs, even after when I had chosen VERBOSE.
REST are properly configured. I can view and edit my secured services after log on.

EDIT
I tried to remove security from that service.
Now when I'm clocking on attachment I'm redirected to site similiar as above except token key:

https://mysite.com/ArcGIS/rest/services/MyServices/FS/MapServer/27/95/attachments/96

But  result still the same. As in post 1.

[GISDev1]

Hi,

I'm trying to configure and lauch an FV application to work with attachments. First I configured my SDE feature to use attachments. Then I've added some to features.
Then I've created my application, added my features (which is as Feature Service). Everything works it displays ok. But when I'm turning on attachments view and then I'm trying to see theese attachments server throws me an error saying:

Error
Server Error - remote server returned an error: (403) Access denied.
Code: 500

Why?
All my REST applications runs ok. My site is SSLed, security ON over MSSQL, token correctly configured (logins and passwords works no problem), and ArcGIS Server Manager logs are empty.

Probably an SDE permissions issue. Did you check that you gave read permissions to the ArcGIS Server User Account that is being used in the SDE connection?

[PiotrSkworzec]

GISDev01, could You explain more detailed?
All attachments are stored in SDE over PostgreSQL. Aren't SDE permissions enought to read attachments? Where do I have to check permissions? On SDE attachment table? If so, who do I need to add to enable attachment read? My ArcGIS Users which are stored in MS SQL ie. myUser?

[GISDev1]

GISDev01, could You explain more detailed?
All attachments are stored in SDE over PostgreSQL. Aren't SDE permissions enought to read attachments? Where do I have to check permissions? On SDE attachment table? If so, who do I need to add to enable attachment read? My ArcGIS Users which are stored in MS SQL ie. myUser?

Let's start from the beginning. This is probably not a Flex issue.

See if you can access the attachment through ArcMap. Then see how the ArcGIS Server service is accessing SDE, ie. with which SDE connection parameters.

[PiotrSkworzec]

1. I can access attachments through ArcMap (write and read).
2. Sorry for noob question, but how can I check that?

Then see how the ArcGIS Server service is accessing SDE, ie. with which SDE connection parameters.

[GISDev1]

1. I can access attachments through ArcMap (write and read).
2. Sorry for noob question, but how can I check that?

Server Manager - Site - Data Store - Registered Databases

[PiotrSkworzec]

Hi,
I still doesn't found an answer. GISDev01, I don't have ArcGIS 10.1, only 10 sp5, so I cannot see registered databases.

It's very strange, because when I turn on editing of a feature with attachments via FlexViewer, I can add or delete attachments, but I cannot read it. Error as in post 1 appears.

[MichaelBarker · Accepted solution]

I recently had a similar issue with attachments and after much playing around with security on the service and sde side of things resorted to Esri's tech support.  We're running AGS v10, SP5 with https as well.  After much testing and elimination of the obvious, we found the problem was tied to the authentication set on the AGS output folder.  To fix this we did the following.
1. Access the IIS manager on the AGS web server.
2. Expand the Sites folder then find and highlight the AGS output folder (e.g. arcgisoutput).
3. Access the Authentication option under IIS.
4. Change the Anonymous Authentication from Disabled to Enabled.

Not something I would have thought to look at, but now viewing attachments with FV without issue.

[PiotrSkworzec]

Thank you mbarker. Now works fine!