Design Manager - Permission to Import Denied
I have installed a local version of RSA DM 4.0.5. The installation was successful and I set out to import models from RSA into the design manager server.
1. I first tried using the import engine. When I tried to create an import definition, I received a error pop-up saying that the permission to perform this operation was denied.
2. I then created another sample project and tried to push models using the RSA Client extension and yet again received the same error message.
I am the administrator of the project and I have assigned the RSA DM license to myself. I have also installed the configuration management module (vvc) and I am using the default domain extension server (localhost:9443/rsadm). I have tried both the "Blank" and "Basic" process templates. In each case, I have assigned permissions to perform all operations to "Everyone" as well as "Architect" and "Commenter". I have also tried creating new non-administrator users; But no luck so far.
I have no idea why I am being denied access to import models into the server.
I have attached the error logs from both scenarios. Thanks!
1. Import Engine - dm.log file
POST https://localhost:9443/dm/importer/definitions/_2gYpQ3NYEeOZLfGlhbXLww?rmps.context=https://localhost:9443/dm/streams/9 HTTP/1.1
Rmps Request Headers:
host: localhost:9443
user-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate
x-ibm-rmps-internal: true
x-jazz-downstream-auth-client-level: 4.0
content-type: application/rdf+json; charset=UTF-8
x-requested-with: XMLHttpRequest
referer: https://localhost:9443/dm/web/projects/Test?rmps.context=https%3A%2F%2Flocalhost%3A9443%2Fdm%2Fstreams%2F9
content-length: 1336
cookie: SaveStateCookie=undefined; JSESSIONID=F48574D49F99DA4F758C37DFB81211C5; com_ibm_team_process_web_ui_internal_admin_projects_ProcessTree_0SaveSelectedCookie=%2F0; com_ibm_team_process_web_ui_internal_admin_projects_ProcessTree_1SaveSelectedCookie=%2F2; net-jazz-ajax-cookie-rememberUserId=; jfs-oauth-access-token0=eee56c3261014f01a856cefa514eaef6; jfs-oauth-access_token-secret0=Co8plfYK1xQC430IbsqCqd19zq4onXEiuJTygjw; JAZZ_AUTH_TOKEN=eee56c3261014f01a856cefa514eaef6&Co8plfYK1xQC430IbsqCqd19zq4onXEiuJTygjw; jfs-oauth-realm-mapping=https%3A%2F%2Flocalhost%3A9443%2Fjts%3D0; JSESSIONIDSSO=36F1E084765380AF4672150DD7CB2EBB
connection: keep-alive
pragma: no-cache
cache-control: no-cache
X-ibm-internal-dm-request-correlation-ID: 429d1b10-5659-4930-aafe-265c1e9fccdf
com.ibm.xtools.rmps.frontservice.common.process.RmpsSecurityException: 403 :Permission to perform the operation was denied - OPERATION_DENIED
at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService._isActionAllowed(SecurityService.java:124)
at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService.isActionAllowed(SecurityService.java:94)
at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService.isActionAllowed(SecurityService.java:75)
at com.ibm.xtools.rsa.rmps.services.ImporterFrontService.postDefinitions(ImporterFrontService.java:434)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.doFilter(AnnotationFrontService.java:168)
at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
at com.ibm.xtools.rmps.frontservice.annotation.internal.AnnotationDispatchingFilter.doFilter(AnnotationDispatchingFilter.java:44)
at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
at com.ibm.xtools.rmps.frontservice.annotation.internal.ContentNegotiationFilter.doFilter(ContentNegotiationFilter.java:45)
at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
at com.ibm.xtools.rmps.frontservice.annotation.internal.ResponseConversionFilter.doFilter(ResponseConversionFilter.java:83)
at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.doAnnotatedService(AnnotationFrontService.java:129)
at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.rmpsPost(AnnotationFrontService.java:341)
at com.ibm.xtools.rmps.frontservice.jaf.RmpsFrontService.rmpsService(RmpsFrontService.java:258)
at com.ibm.xtools.rmps.frontservice.jaf.common.BasicRmpsFrontService.doPost(BasicRmpsFrontService.java:570)
at com.ibm.team.jfs.app.servlet.AppContainerServlet.dispatchRequest(AppContainerServlet.java:176)
at com.ibm.team.jfs.app.servlet.AppContainerServlet.service(AppContainerServlet.java:281)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.service(AbstractTeamServerServlet.java:1674)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at org.eclipse.equinox.http.registry.internal.ServletManager$ServletWrapper.service(ServletManager.java:180)
at org.eclipse.equinox.http.servlet.internal.ServletRegistration.service(ServletRegistration.java:61)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:126)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:76)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at org.eclipse.equinox.servletbridge.BridgeServlet.service(BridgeServlet.java:120)
at com.ibm.team.repository.server.servletbridge.JazzServlet.service(JazzServlet.java:74)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at com.ibm.team.repository.server.servletbridge.BridgeFilter.processDelegate(BridgeFilter.java:165)
at com.ibm.team.repository.server.servletbridge.BridgeFilter.doFilter(BridgeFilter.java:198)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:336)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1002)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:585)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:906)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:929)
at java.lang.Thread.run(Thread.java:738)
</err:detailedMessage>
<err:errorSubStatus rdf:datatype="http://www.w3.org/2001/XMLSchema#string"
>OPERATION_DENIED</err:errorSubStatus>
<err:errorMessage rdf:datatype="http://www.w3.org/2001/XMLSchema#string"
>Permission to perform the operation was denied</err:errorMessage>
<err:errorStatus rdf:datatype="http://www.w3.org/2001/XMLSchema#long"
>403</err:errorStatus>
</rdf:Description>
</rdf:RDF>
2. RSA Client Extension
Rmps Request Headers:
x-ibm-rmps-internal: true
content-type: application/zip
content-length: 4253858
host: localhost:9443
connection: Keep-Alive
cookie: JAZZ_AUTH_TOKEN=ec97c0f51cee481e9834efff86d339c5&yN3jIDmrnVCR0uq0dJAMbZ9QehVlrKKaLmA3RTYrY; JSESSIONID=764757B4A6189FA7C024A14A17562C4D; JSESSIONIDSSO=AE2025D51B253651B8632D020DD42F78; jfs-oauth-access-token0=ec97c0f51cee481e9834efff86d339c5; jfs-oauth-access_token-secret0=yN3jIDmrnVCR0uq0dJAMbZ9QehVlrKKaLmA3RTYrY; jfs-oauth-realm-mapping=https%3A%2F%2Flocalhost%3A9443%2Fjts%3D0
cookie2: $Version=1
accept-encoding: gzip
X-ibm-internal-dm-request-correlation-ID: 7eeae170-eb49-4bfa-adba-237cf1447491
Permission to perform the operation was denied
End of report
at...
com.ibm.xtools.rmpx.oauth.OAuthCommunicatorException
at com.ibm.xtools.rmpx.oauth.OAuthCommunicator.execute(OAuthCommunicator.java:108)
at com.ibm.xtools.rmpx.oauth.OAuthCommunicator.execute(OAuthCommunicator.java:100)
at com.ibm.xtools.kenton.client.importer.internal.RmpsImporterService.requestImport(RmpsImporterService.java:2018)
at com.ibm.xtools.rmpc.ui.internal.rmps.publish.PublishWizard$1$1.doExecute(PublishWizard.java:196)
at com.ibm.xtools.rmpc.core.internal.connection.OAuthServerRequest.call(OAuthServerRequest.java:81)
at com.ibm.xtools.rmpc.core.internal.connection.InternalOAuthServerRequest.call(InternalOAuthServerRequest.java:52)
at com.ibm.xtools.rmpc.core.internal.connection.InternalOAuthServerRequest.call(InternalOAuthServerRequest.java:1)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:345)
at java.util.concurrent.FutureTask.run(FutureTask.java:177)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626)
at java.lang.Thread.run(Thread.java:780)
1. I first tried using the import engine. When I tried to create an import definition, I received a error pop-up saying that the permission to perform this operation was denied.
2. I then created another sample project and tried to push models using the RSA Client extension and yet again received the same error message.
I am the administrator of the project and I have assigned the RSA DM license to myself. I have also installed the configuration management module (vvc) and I am using the default domain extension server (localhost:9443/rsadm). I have tried both the "Blank" and "Basic" process templates. In each case, I have assigned permissions to perform all operations to "Everyone" as well as "Architect" and "Commenter". I have also tried creating new non-administrator users; But no luck so far.
I have no idea why I am being denied access to import models into the server.
I have attached the error logs from both scenarios. Thanks!
1. Import Engine - dm.log file
POST https://localhost:9443/dm/importer/definitions/_2gYpQ3NYEeOZLfGlhbXLww?rmps.context=https://localhost:9443/dm/streams/9 HTTP/1.1
Rmps Request Headers:
host: localhost:9443
user-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate
x-ibm-rmps-internal: true
x-jazz-downstream-auth-client-level: 4.0
content-type: application/rdf+json; charset=UTF-8
x-requested-with: XMLHttpRequest
referer: https://localhost:9443/dm/web/projects/Test?rmps.context=https%3A%2F%2Flocalhost%3A9443%2Fdm%2Fstreams%2F9
content-length: 1336
cookie: SaveStateCookie=undefined; JSESSIONID=F48574D49F99DA4F758C37DFB81211C5; com_ibm_team_process_web_ui_internal_admin_projects_ProcessTree_0SaveSelectedCookie=%2F0; com_ibm_team_process_web_ui_internal_admin_projects_ProcessTree_1SaveSelectedCookie=%2F2; net-jazz-ajax-cookie-rememberUserId=; jfs-oauth-access-token0=eee56c3261014f01a856cefa514eaef6; jfs-oauth-access_token-secret0=Co8plfYK1xQC430IbsqCqd19zq4onXEiuJTygjw; JAZZ_AUTH_TOKEN=eee56c3261014f01a856cefa514eaef6&Co8plfYK1xQC430IbsqCqd19zq4onXEiuJTygjw; jfs-oauth-realm-mapping=https%3A%2F%2Flocalhost%3A9443%2Fjts%3D0; JSESSIONIDSSO=36F1E084765380AF4672150DD7CB2EBB
connection: keep-alive
pragma: no-cache
cache-control: no-cache
X-ibm-internal-dm-request-correlation-ID: 429d1b10-5659-4930-aafe-265c1e9fccdf
com.ibm.xtools.rmps.frontservice.common.process.RmpsSecurityException: 403 :Permission to perform the operation was denied - OPERATION_DENIED
at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService._isActionAllowed(SecurityService.java:124)
at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService.isActionAllowed(SecurityService.java:94)
at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService.isActionAllowed(SecurityService.java:75)
at com.ibm.xtools.rsa.rmps.services.ImporterFrontService.postDefinitions(ImporterFrontService.java:434)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.doFilter(AnnotationFrontService.java:168)
at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
at com.ibm.xtools.rmps.frontservice.annotation.internal.AnnotationDispatchingFilter.doFilter(AnnotationDispatchingFilter.java:44)
at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
at com.ibm.xtools.rmps.frontservice.annotation.internal.ContentNegotiationFilter.doFilter(ContentNegotiationFilter.java:45)
at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
at com.ibm.xtools.rmps.frontservice.annotation.internal.ResponseConversionFilter.doFilter(ResponseConversionFilter.java:83)
at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.doAnnotatedService(AnnotationFrontService.java:129)
at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.rmpsPost(AnnotationFrontService.java:341)
at com.ibm.xtools.rmps.frontservice.jaf.RmpsFrontService.rmpsService(RmpsFrontService.java:258)
at com.ibm.xtools.rmps.frontservice.jaf.common.BasicRmpsFrontService.doPost(BasicRmpsFrontService.java:570)
at com.ibm.team.jfs.app.servlet.AppContainerServlet.dispatchRequest(AppContainerServlet.java:176)
at com.ibm.team.jfs.app.servlet.AppContainerServlet.service(AppContainerServlet.java:281)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.service(AbstractTeamServerServlet.java:1674)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at org.eclipse.equinox.http.registry.internal.ServletManager$ServletWrapper.service(ServletManager.java:180)
at org.eclipse.equinox.http.servlet.internal.ServletRegistration.service(ServletRegistration.java:61)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:126)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:76)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at org.eclipse.equinox.servletbridge.BridgeServlet.service(BridgeServlet.java:120)
at com.ibm.team.repository.server.servletbridge.JazzServlet.service(JazzServlet.java:74)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at com.ibm.team.repository.server.servletbridge.BridgeFilter.processDelegate(BridgeFilter.java:165)
at com.ibm.team.repository.server.servletbridge.BridgeFilter.doFilter(BridgeFilter.java:198)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:336)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1002)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:585)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:906)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:929)
at java.lang.Thread.run(Thread.java:738)
</err:detailedMessage>
<err:errorSubStatus rdf:datatype="http://www.w3.org/2001/XMLSchema#string"
>OPERATION_DENIED</err:errorSubStatus>
<err:errorMessage rdf:datatype="http://www.w3.org/2001/XMLSchema#string"
>Permission to perform the operation was denied</err:errorMessage>
<err:errorStatus rdf:datatype="http://www.w3.org/2001/XMLSchema#long"
>403</err:errorStatus>
</rdf:Description>
</rdf:RDF>
2. RSA Client Extension
Rmps Request Headers:
x-ibm-rmps-internal: true
content-type: application/zip
content-length: 4253858
host: localhost:9443
connection: Keep-Alive
cookie: JAZZ_AUTH_TOKEN=ec97c0f51cee481e9834efff86d339c5&yN3jIDmrnVCR0uq0dJAMbZ9QehVlrKKaLmA3RTYrY; JSESSIONID=764757B4A6189FA7C024A14A17562C4D; JSESSIONIDSSO=AE2025D51B253651B8632D020DD42F78; jfs-oauth-access-token0=ec97c0f51cee481e9834efff86d339c5; jfs-oauth-access_token-secret0=yN3jIDmrnVCR0uq0dJAMbZ9QehVlrKKaLmA3RTYrY; jfs-oauth-realm-mapping=https%3A%2F%2Flocalhost%3A9443%2Fjts%3D0
cookie2: $Version=1
accept-encoding: gzip
X-ibm-internal-dm-request-correlation-ID: 7eeae170-eb49-4bfa-adba-237cf1447491
Permission to perform the operation was denied
End of report
at...
com.ibm.xtools.rmpx.oauth.OAuthCommunicatorException
at com.ibm.xtools.rmpx.oauth.OAuthCommunicator.execute(OAuthCommunicator.java:108)
at com.ibm.xtools.rmpx.oauth.OAuthCommunicator.execute(OAuthCommunicator.java:100)
at com.ibm.xtools.kenton.client.importer.internal.RmpsImporterService.requestImport(RmpsImporterService.java:2018)
at com.ibm.xtools.rmpc.ui.internal.rmps.publish.PublishWizard$1$1.doExecute(PublishWizard.java:196)
at com.ibm.xtools.rmpc.core.internal.connection.OAuthServerRequest.call(OAuthServerRequest.java:81)
at com.ibm.xtools.rmpc.core.internal.connection.InternalOAuthServerRequest.call(InternalOAuthServerRequest.java:52)
at com.ibm.xtools.rmpc.core.internal.connection.InternalOAuthServerRequest.call(InternalOAuthServerRequest.java:1)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:345)
at java.util.concurrent.FutureTask.run(FutureTask.java:177)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626)
at java.lang.Thread.run(Thread.java:780)
One answer
Hi,
What is the topology you are using and setup (OS vendor, DB vendor , Application server: Tomcat or WAS)?
By default, the publisher role is the one which has the most Import Management permissions (notably the Create an import definition one).
Additionally, make sure you have the correct permission set at the level of VVC:
https://<HostName>:<PORT>/vvc/admin#action=action=com.ibm.team.process.manageProjectAreas -> your project area
For example make sure you have permission to everyone for Configurations > Update (update which resources are part of this configuration).
For further information check the following infocenter page:
Management of shared resources
Setting permissions for configurations in configuration spaces
If this does not help, try to create a new workspace (using the drop down options on the toolbar at the left of the user profile section).
Regards,
Francois
What is the topology you are using and setup (OS vendor, DB vendor , Application server: Tomcat or WAS)?
By default, the publisher role is the one which has the most Import Management permissions (notably the Create an import definition one).
Additionally, make sure you have the correct permission set at the level of VVC:
https://<HostName>:<PORT>/vvc/admin#action=action=com.ibm.team.process.manageProjectAreas -> your project area
For example make sure you have permission to everyone for Configurations > Update (update which resources are part of this configuration).
For further information check the following infocenter page:
Management of shared resources
Setting permissions for configurations in configuration spaces
If this does not help, try to create a new workspace (using the drop down options on the toolbar at the left of the user profile section).
Regards,
Francois