It's all about the answers!

Ask a question

Design Manager - Permission to Import Denied


Ragi M.S. (133) | asked Jan 01 '14, 9:51 p.m.
edited Jan 02 '14, 12:38 a.m.
I have installed a local version of RSA DM 4.0.5. The installation was successful and I set out to import models from RSA into the design manager server.

1. I first tried using the import engine. When I tried to create an import definition, I received a error pop-up saying that the permission to perform this operation was denied.
2. I then created another sample project and tried to push models using the RSA Client extension and yet again received the same error message.

I am the administrator of the project and I have assigned the RSA DM license to myself. I have also installed the configuration management module (vvc) and I am using the default domain extension server (localhost:9443/rsadm). I have tried both the "Blank" and "Basic" process templates. In each case, I have assigned permissions to perform all operations to "Everyone" as well as "Architect" and "Commenter". I have also tried creating new non-administrator users; But no luck so far.

I have no idea why I am being denied access to import models into the server.

I have attached the error logs from both scenarios. Thanks!


1. Import Engine - dm.log file

  POST https://localhost:9443/dm/importer/definitions/_2gYpQ3NYEeOZLfGlhbXLww?rmps.context=https://localhost:9443/dm/streams/9 HTTP/1.1
Rmps Request Headers:
  host: localhost:9443
  user-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0
  accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  accept-language: en-US,en;q=0.5
  accept-encoding: gzip, deflate
  x-ibm-rmps-internal: true
  x-jazz-downstream-auth-client-level: 4.0
  content-type: application/rdf+json; charset=UTF-8
  x-requested-with: XMLHttpRequest
  referer: https://localhost:9443/dm/web/projects/Test?rmps.context=https%3A%2F%2Flocalhost%3A9443%2Fdm%2Fstreams%2F9
  content-length: 1336
  cookie: SaveStateCookie=undefined; JSESSIONID=F48574D49F99DA4F758C37DFB81211C5; com_ibm_team_process_web_ui_internal_admin_projects_ProcessTree_0SaveSelectedCookie=%2F0; com_ibm_team_process_web_ui_internal_admin_projects_ProcessTree_1SaveSelectedCookie=%2F2; net-jazz-ajax-cookie-rememberUserId=; jfs-oauth-access-token0=eee56c3261014f01a856cefa514eaef6; jfs-oauth-access_token-secret0=Co8plfYK1xQC430IbsqCqd19zq4onXEiuJTygjw; JAZZ_AUTH_TOKEN=eee56c3261014f01a856cefa514eaef6&Co8plfYK1xQC430IbsqCqd19zq4onXEiuJTygjw; jfs-oauth-realm-mapping=https%3A%2F%2Flocalhost%3A9443%2Fjts%3D0; JSESSIONIDSSO=36F1E084765380AF4672150DD7CB2EBB
  connection: keep-alive
  pragma: no-cache
  cache-control: no-cache
  X-ibm-internal-dm-request-correlation-ID: 429d1b10-5659-4930-aafe-265c1e9fccdf

com.ibm.xtools.rmps.frontservice.common.process.RmpsSecurityException: 403 :Permission to perform the operation was denied - OPERATION_DENIED
    at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService._isActionAllowed(SecurityService.java:124)
    at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService.isActionAllowed(SecurityService.java:94)
    at com.ibm.xtools.rmps.frontservice.jaf.process.internal.SecurityService.isActionAllowed(SecurityService.java:75)
    at com.ibm.xtools.rsa.rmps.services.ImporterFrontService.postDefinitions(ImporterFrontService.java:434)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
    at java.lang.reflect.Method.invoke(Method.java:611)
    at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.doFilter(AnnotationFrontService.java:168)
    at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
    at com.ibm.xtools.rmps.frontservice.annotation.internal.AnnotationDispatchingFilter.doFilter(AnnotationDispatchingFilter.java:44)
    at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
    at com.ibm.xtools.rmps.frontservice.annotation.internal.ContentNegotiationFilter.doFilter(ContentNegotiationFilter.java:45)
    at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
    at com.ibm.xtools.rmps.frontservice.annotation.internal.ResponseConversionFilter.doFilter(ResponseConversionFilter.java:83)
    at com.ibm.xtools.rmps.frontservice.annotation.internal.FilterChainImpl.doFilter(FilterChainImpl.java:39)
    at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.doAnnotatedService(AnnotationFrontService.java:129)
    at com.ibm.xtools.rmps.frontservice.jaf.annotation.internal.AnnotationFrontService.rmpsPost(AnnotationFrontService.java:341)
    at com.ibm.xtools.rmps.frontservice.jaf.RmpsFrontService.rmpsService(RmpsFrontService.java:258)
    at com.ibm.xtools.rmps.frontservice.jaf.common.BasicRmpsFrontService.doPost(BasicRmpsFrontService.java:570)
    at com.ibm.team.jfs.app.servlet.AppContainerServlet.dispatchRequest(AppContainerServlet.java:176)
    at com.ibm.team.jfs.app.servlet.AppContainerServlet.service(AppContainerServlet.java:281)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
    at com.ibm.team.repository.servlet.AbstractTeamServerServlet.service(AbstractTeamServerServlet.java:1674)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
    at org.eclipse.equinox.http.registry.internal.ServletManager$ServletWrapper.service(ServletManager.java:180)
    at org.eclipse.equinox.http.servlet.internal.ServletRegistration.service(ServletRegistration.java:61)
    at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:126)
    at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:76)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
    at org.eclipse.equinox.servletbridge.BridgeServlet.service(BridgeServlet.java:120)
    at com.ibm.team.repository.server.servletbridge.JazzServlet.service(JazzServlet.java:74)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
    at com.ibm.team.repository.server.servletbridge.BridgeFilter.processDelegate(BridgeFilter.java:165)
    at com.ibm.team.repository.server.servletbridge.BridgeFilter.doFilter(BridgeFilter.java:198)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
    at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:336)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
    at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1002)
    at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:585)
    at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
    at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:906)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:929)
    at java.lang.Thread.run(Thread.java:738)
</err:detailedMessage>
    <err:errorSubStatus rdf:datatype="http://www.w3.org/2001/XMLSchema#string"
    >OPERATION_DENIED</err:errorSubStatus>
    <err:errorMessage rdf:datatype="http://www.w3.org/2001/XMLSchema#string"
    >Permission to perform the operation was denied</err:errorMessage>
    <err:errorStatus rdf:datatype="http://www.w3.org/2001/XMLSchema#long"
    >403</err:errorStatus>
  </rdf:Description>
</rdf:RDF>

2. RSA Client Extension

Rmps Request Headers:
  x-ibm-rmps-internal: true
  content-type: application/zip
  content-length: 4253858
  host: localhost:9443
  connection: Keep-Alive
  cookie: JAZZ_AUTH_TOKEN=ec97c0f51cee481e9834efff86d339c5&yN3jIDmrnVCR0uq0dJAMbZ9QehVlrKKaLmA3RTYrY; JSESSIONID=764757B4A6189FA7C024A14A17562C4D; JSESSIONIDSSO=AE2025D51B253651B8632D020DD42F78; jfs-oauth-access-token0=ec97c0f51cee481e9834efff86d339c5; jfs-oauth-access_token-secret0=yN3jIDmrnVCR0uq0dJAMbZ9QehVlrKKaLmA3RTYrY; jfs-oauth-realm-mapping=https%3A%2F%2Flocalhost%3A9443%2Fjts%3D0
  cookie2: $Version=1
  accept-encoding: gzip
  X-ibm-internal-dm-request-correlation-ID: 7eeae170-eb49-4bfa-adba-237cf1447491

Permission to perform the operation was denied
End of report

at...
com.ibm.xtools.rmpx.oauth.OAuthCommunicatorException
    at com.ibm.xtools.rmpx.oauth.OAuthCommunicator.execute(OAuthCommunicator.java:108)
    at com.ibm.xtools.rmpx.oauth.OAuthCommunicator.execute(OAuthCommunicator.java:100)
    at com.ibm.xtools.kenton.client.importer.internal.RmpsImporterService.requestImport(RmpsImporterService.java:2018)
    at com.ibm.xtools.rmpc.ui.internal.rmps.publish.PublishWizard$1$1.doExecute(PublishWizard.java:196)
    at com.ibm.xtools.rmpc.core.internal.connection.OAuthServerRequest.call(OAuthServerRequest.java:81)
    at com.ibm.xtools.rmpc.core.internal.connection.InternalOAuthServerRequest.call(InternalOAuthServerRequest.java:52)
    at com.ibm.xtools.rmpc.core.internal.connection.InternalOAuthServerRequest.call(InternalOAuthServerRequest.java:1)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:345)
    at java.util.concurrent.FutureTask.run(FutureTask.java:177)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1156)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:626)
    at java.lang.Thread.run(Thread.java:780)


One answer



permanent link
Francois-xavier Panaget (58914) | answered Jan 02 '14, 10:29 a.m.
Hi,

What is the topology you are using and setup (OS vendor, DB vendor , Application server: Tomcat or WAS)?
By default, the publisher role is the one which has the most Import Management permissions (notably the Create an import definition one).
Additionally, make sure you have the correct permission set at the level of VVC:
https://<HostName>:<PORT>/vvc/admin#action=action=com.ibm.team.process.manageProjectAreas -> your project area
For example make sure you have permission to everyone for Configurations > Update (update which resources are part of this configuration).
For further information check the following infocenter page:
Management of shared resources
Setting permissions for configurations in configuration spaces
If this does not help, try to create a new workspace (using the drop down options on the toolbar at the left of the user profile section).

Regards,
Francois

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.