Design Manager - Permission to Import Denied
I have installed a local version of RSA DM 4.0.5. The installation was successful and I set out to import models from RSA into the design manager server.
1. I first tried using the import engine. When I tried to create an import definition, I received a error pop-up saying that the permission to perform this operation was denied. 2. I then created another sample project and tried to push models using the RSA Client extension and yet again received the same error message. I am the administrator of the project and I have assigned the RSA DM license to myself. I have also installed the configuration management module (vvc) and I am using the default domain extension server (localhost:9443/rsadm). I have tried both the "Blank" and "Basic" process templates. In each case, I have assigned permissions to perform all operations to "Everyone" as well as "Architect" and "Commenter". I have also tried creating new non-administrator users; But no luck so far. I have no idea why I am being denied access to import models into the server. I have attached the error logs from both scenarios. Thanks! 1. Import Engine - dm.log file POST https://localhost:9443/dm/importer/definitions/_2gYpQ3NYEeOZLfGlhbXLww?rmps.context=https://localhost:9443/dm/streams/9 HTTP/1.1 Rmps Request Headers: host: localhost:9443 user-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0 accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 accept-language: en-US,en;q=0.5 accept-encoding: gzip, deflate x-ibm-rmps-internal: true x-jazz-downstream-auth-client-level: 4.0 content-type: application/rdf+json; charset=UTF-8 x-requested-with: XMLHttpRequest referer: https://localhost:9443/dm/web/projects/Test?rmps.context=https%3A%2F%2Flocalhost%3A9443%2Fdm%2Fstreams%2F9 content-length: 1336 cookie: SaveStateCookie=undefined; JSESSIONID=F48574D49F99DA4F758C37DFB81211C5; com_ibm_team_process_web_ui_internal_admin_projects_ProcessTree_0SaveSelectedCookie=%2F0; com_ibm_team_process_web_ui_internal_admin_projects_ProcessTree_1SaveSelectedCookie=%2F2; net-jazz-ajax-cookie-rememberUserId=; jfs-oauth-access-token0=eee56c3261014f01a856cefa514eaef6; jfs-oauth-access_token-secret0=Co8plfYK1xQC430IbsqCqd19zq4onXEiuJTygjw; JAZZ_AUTH_TOKEN=eee56c3261014f01a856cefa514eaef6&Co8plfYK1xQC430IbsqCqd19zq4onXEiuJTygjw; jfs-oauth-realm-mapping=https%3A%2F%2Flocalhost%3A9443%2Fjts%3D0; JSESSIONIDSSO=36F1E084765380AF4672150DD7CB2EBB connection: keep-alive pragma: no-cache cache-control: no-cache X-ibm-internal-dm-request-correlation-ID: 429d1b10-5659-4930-aafe-265c1e9fccdf com.ibm.xtools.rmps.frontservice.common.process.RmpsSecurityException: 403 :Permission to perform the operation was denied - OPERATION_DENIED
 at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService._isActionAllowed(SecurityService.java:124)
 at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService.isActionAllowed(SecurityService.java:94)
 at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService.isActionAllowed(SecurityService.java:75)
 at com.ibm.xtools.rsa.rmps.services.ImporterFrontService.postDefinitions(ImporterFrontService.java:434)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
 at java.lang.reflect.Method.invoke(Method.java:611)
 at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.doFilter(AnnotationFrontService.java:168)
 at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
 at com.ibm.xtools.rmps.frontservice.annotation.internal.AnnotationDispatchingFilter.doFilter(AnnotationDispatchingFilter.java:44)
 at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
 at com.ibm.xtools.rmps.frontservice.annotation.internal.ContentNegotiationFilter.doFilter(ContentNegotiationFilter.java:45)
 at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
 at com.ibm.xtools.rmps.frontservice.annotation.internal.ResponseConversionFilter.doFilter(ResponseConversionFilter.java:83)
 at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
 at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.doAnnotatedService(AnnotationFrontService.java:129)
 at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.rmpsPost(AnnotationFrontService.java:341)
 at com.ibm.xtools.rmps.frontservice.jaf.RmpsFrontService.rmpsService(RmpsFrontService.java:258)
 at com.ibm.xtools.rmps.frontservice.jaf.common.BasicRmpsFrontService.doPost(BasicRmpsFrontService.java:570)
 at com.ibm.team.jfs.app.servlet.AppContainerServlet.dispatchRequest(AppContainerServlet.java:176)
 at com.ibm.team.jfs.app.servlet.AppContainerServlet.service(AppContainerServlet.java:281)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
 at com.ibm.team.repository.servlet.AbstractTeamServerServlet.service(AbstractTeamServerServlet.java:1674)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
 at org.eclipse.equinox.http.registry.internal.ServletManager$ServletWrapper.service(ServletManager.java:180)
 at org.eclipse.equinox.http.servlet.internal.ServletRegistration.service(ServletRegistration.java:61)
 at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:126)
 at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:76)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
 at org.eclipse.equinox.servletbridge.BridgeServlet.service(BridgeServlet.java:120)
 at com.ibm.team.repository.server.servletbridge.JazzServlet.service(JazzServlet.java:74)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
 at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
 at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
 at com.ibm.team.repository.server.servletbridge.BridgeFilter.processDelegate(BridgeFilter.java:165)
 at com.ibm.team.repository.server.servletbridge.BridgeFilter.doFilter(BridgeFilter.java:198)
 at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
 at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
 at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
 at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
 at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
 at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
 at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
 at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:336)
 at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
 at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
 at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1002)
 at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:585)
 at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
 at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:906)
 at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:929)
 at java.lang.Thread.run(Thread.java:738)
 </err:detailedMessage> <err:errorSubStatus rdf:datatype="http://www.w3.org/2001/XMLSchema#string" >OPERATION_DENIED</err:errorSubStatus> <err:errorMessage rdf:datatype="http://www.w3.org/2001/XMLSchema#string" >Permission to perform the operation was denied</err:errorMessage> <err:errorStatus rdf:datatype="http://www.w3.org/2001/XMLSchema#long" >403</err:errorStatus> </rdf:Description> </rdf:RDF> 2. RSA Client Extension Rmps Request Headers: x-ibm-rmps-internal: true content-type: application/zip content-length: 4253858 host: localhost:9443 connection: Keep-Alive cookie: JAZZ_AUTH_TOKEN=ec97c0f51cee481e9834efff86d339c5&yN3jIDmrnVCR0uq0dJAMbZ9QehVlrKKaLmA3RTYrY; JSESSIONID=764757B4A6189FA7C024A14A17562C4D; JSESSIONIDSSO=AE2025D51B253651B8632D020DD42F78; jfs-oauth-access-token0=ec97c0f51cee481e9834efff86d339c5; jfs-oauth-access_token-secret0=yN3jIDmrnVCR0uq0dJAMbZ9QehVlrKKaLmA3RTYrY; jfs-oauth-realm-mapping=https%3A%2F%2Flocalhost%3A9443%2Fjts%3D0 cookie2: $Version=1 accept-encoding: gzip X-ibm-internal-dm-request-correlation-ID: 7eeae170-eb49-4bfa-adba-237cf1447491 Permission to perform the operation was denied End of report at... com.ibm.xtools.rmpx.oauth.OAuthCommunicatorException at com.ibm.xtools.rmpx.oauth.OAuthCommunicator.execute(OAuthCommunicator.java:108) at com.ibm.xtools.rmpx.oauth.OAuthCommunicator.execute(OAuthCommunicator.java:100) at com.ibm.xtools.kenton.client.importer.internal.RmpsImporterService.requestImport(RmpsImporterService.java:2018) at com.ibm.xtools.rmpc.ui.internal.rmps.publish.PublishWizard$1$1.doExecute(PublishWizard.java:196) at com.ibm.xtools.rmpc.core.internal.connection.OAuthServerRequest.call(OAuthServerRequest.java:81) at com.ibm.xtools.rmpc.core.internal.connection.InternalOAuthServerRequest.call(InternalOAuthServerRequest.java:52) at com.ibm.xtools.rmpc.core.internal.connection.InternalOAuthServerRequest.call(InternalOAuthServerRequest.java:1) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:345) at java.util.concurrent.FutureTask.run(FutureTask.java:177) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626) at java.lang.Thread.run(Thread.java:780) |
One answer
Hi,
What is the topology you are using and setup (OS vendor, DB vendor , Application server: Tomcat or WAS)? By default, the publisher role is the one which has the most Import Management permissions (notably the Create an import definition one). Additionally, make sure you have the correct permission set at the level of VVC: https://<HostName>:<PORT>/vvc/admin#action=action=com.ibm.team.process.manageProjectAreas -> your project area For example make sure you have permission to everyone for Configurations > Update (update which resources are part of this configuration). For further information check the following infocenter page: Management of shared resources Setting permissions for configurations in configuration spaces If this does not help, try to create a new workspace (using the drop down options on the toolbar at the left of the user profile section). Regards, Francois |
Your answer
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.