Can't access work items

Kris Rovell-Rixx (36●2●6●8) | asked Jun 10 '13, 12:08 p.m.
edited Jun 24 '13, 3:18 p.m.

An RTC user can't get to work items that are assigned to the category associated with the team, of which he's a member. Please make some suggestions on how to debug his lack of access.

He gets an error: 'no permission', in Eclipse.

The web client returns:

Error fetching or storing Work Item XXXXXX|Details: Error opening work item. User does not have permission to view this workitem XXXXXX.

This feels like it should be a team permission error, but this person is a member of that team.

In jts.log there's an entry that corresponds to his failed access:

jts.log:2013-06-10 11:05:07,985 [ http-bio-443-exec-39701] ERROR serregistry.provider.ldap.AbstractLDAPUserRegistry - CRJAZ1822E Error fetching information for the user "<id removed by me>" from the external user directory.

Though I've been told that LDAP errors in that log are noise and should be ignored.

We're running 4.0.1

Jazz Foundation - Core Libraries	4.0.1 (RJF-I20121109-1457)
com.ibm.team.jfs.rdf.internal.jena - Defect 245241	4.0.1 (v20121102_2006)

As I mentioned, he's a member of the team associated with the work item category. Other people with the same Process Roles do not experience permission issues.

Thanks,

Kris

3 answers

Most liked answers ↑|Newest answers|Oldest answers

permanent link

Kris Rovell-Rixx (36●2●6●8) | answered Jun 24 '13, 3:10 p.m.
edited Jun 24 '13, 3:16 p.m.

On our installation of 4.0.1, in the Work Item Category tab for the Eclipse client and Category section for the web client, they seem to act inconsistently. I can open them, close them, then re-open them and the values for Visibility and for Work Item Restriction will change. If I open both the web client and the Eclipse client at the same time, the values are often different. I can change, save, close the client and re-open the client and the values that are displayed are not consistent. Note this is a separate, but related issue to the user not having access to his work items.

At this time, it appears that the LDAP errors were unrelated to the issue.
Shubjit Naik correctly states that the issue is with the work item restriction. Though it's more slightly more complicated as other users with similar permissions and team membership did not experience the issue.

It perhaps has something to do with our recent upgrade as the user was added after the upgrade.

The work-around for the issue described in the first posting, the user can't access work items, is as follows:
To fix the issue:
1. Open project area
2. Click the Work Item Category tab in the Eclipse client, or Categories in the web client
3. Uncheck all Visibility boxes
4. Clear all values for Restrict Work Item Access
5. Save, log out, close the client
6. NOTE: at this point, the user should be able to see their work items
7. Open the client
8. Open the project area
9. Click the Work Item Category tab, or Categories in the web client
10. Set the Visibility boxes as needed
11. Make the selections for Restrict Work Item Access as needed

Closing the client and re-opening might not be needed, though it's difficult to know, as this part of the client doesn't seem to always accurately reflect the state of visibility and restriction as it exists on the server.

permanent link

Indradri Basu (1.8k●1●5●14) | answered Jun 10 '13, 3:15 p.m.

Hi Kris, to me this still looks like this user id has some problem in LDAP. Few things you may want to check are, if this user has been added to Jazz groups, got a valid license, if this user id has duplicates, if the account is unlocked (unlikely if the user can login) and lastly compare this user id with another working user id (using dsquery if Active directory or by any LDAP browser)
Also check the application server logs (like systemout.log, if WAS) for any relevant errors around the same timestamp.

Comments

Kris Rovell-Rixx commented Jun 10 '13, 5:03 p.m.

Hi Indrardri,

Thanks for your response.

The user does have a valid license. I can't find dups. The account isn't locked.

I did look at ldap, using ldapsearch, which finds the record and I compared it to my record. It looks unremarkable.

While I see errors in the logs that match the user's ID, I don't always see an error in the log. The error messages have not yet been helpful.

Thanks again,

Kris

Indradri Basu commented Jun 11 '13, 3:00 a.m.

Hi Kris, if the user is not facing this consistently then it would be difficult to doubt RTC and this may be happening due to connectivity issues. I think the best would be to open a service request with Rational Support to investigate further.

Kris Rovell-Rixx commented Jun 11 '13, 10:48 a.m.

It is consistent. Every time the user tries to access work items assigned to him, he gets the error. I don't consistently see errors in the logs. However, the user cannot, at all, get to his assigned work items.

I'm in the process of opening a service request.

I've not seen a good strategy for debugging ldap issues in RTC.

Indradri Basu commented Jun 11 '13, 1:24 p.m.

Hi Kris, I am assuming that the user can login to RTC successfully. From the web, can the user see the project area name from the My Projects tab ?
If the answer is yes, I am going to make a blind guess. Could you try removing the user from that PA, save the PA and add the user back and see if that makes things any better.

permanent link

Shubjit Naik (1.5k●1●6●13) | answered Jun 11 '13, 5:29 a.m.

Hi Kris

We might also get this error when the Work Item Visibility is restricted.

As a User who can see this Work Item, in Eclipse Client, Click the Work Item ID > Restricted Access as Below and see what it is set to. If it is set to a Project Area, set it to the Team Area and the User should be able to see it.

Comments

Kris Rovell-Rixx commented Jun 11 '13, 10:51 a.m.

In my original post I mentioned that the user is a member of the team that's associated with the work item's category. There is a restricted access. The user has a co-worker with the all the same team memberships and the co-worker does not have the same permission issue.

Thanks for your suggestion.

Kris Rovell-Rixx commented Jun 13 '13, 11:40 a.m. | edited Jun 13 '13, 11:41 a.m.

I'm working with the good people in IBM support and I wanted to close the loop on this thread.

I removed the restriction on the work item category. That is, I changed the work item category from unchecked, to checked. In either state, either checked or unchecked, the user has no permission to view work items.

Checked categories are visible to all users. In this case, for this user, the state of the category's visibility has no effect. The user cannot see his work items.

I tried giving the user all possible roles. This had no effect. The user still could not view work items.

If I learn more information that looks userul to the jazz.net community I'll post it.

Thanks to both of you, Subjit and Indradri for responding.

Kris

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

It's all about the answers!

Related questions

Can't access work items

3 answers

Your answer