Access problem when using RQM REST API
Hello,
I'm trying to copy data from one RQM instance to another. I'm using the RQMCopyUtility 2.0.1 iFix 3
On my source instance I have 2 projects. When copying from one project I'm able to copy data to my target instance but when I try to copy from the other project I get the following error:
SEVERE: General REST Exception: RestException executing: GET Artifact Feed, RC: 500, message: com.ibm.team.repository.common.PermissionDeniedException: CRJAZ131
6I Illegal read access: User "bturetz@us.ibm.com" attempted to read item(s) having the following type(s): ProjectArea
at com.ibm.team.repository.service.internal.ComponentRepositoryItemService.fetchItem(ComponentRepositoryItemService.java:498)
at com.ibm.rqm.integration.service.IntegrationServiceURI.getProjectArea(IntegrationServiceURI.java:413)
at com.ibm.rqm.integration.service.internal.IntegrationService.checkPermissions(IntegrationService.java:812)
at com.ibm.rqm.integration.service.internal.IntegrationService.handleRequest(IntegrationService.java:393)
at com.ibm.rqm.integration.service.internal.IntegrationService.perform_GET(IntegrationService.java:171)
at com.ibm.team.repository.service.TeamRawService.service(TeamRawService.java:82)
at sun.reflect.GeneratedMethodAccessor237.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.invoke(ExportProxyServiceRecord.java:370)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.access$0(ExportProxyServiceRecord.java:356)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord$ExportedServiceInvocationHandler.invoke(ExportProxyServiceRecord.java:56)
at $Proxy457.service(Unknown Source)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.doRestService(AbstractTeamServerServlet.java:879)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleRequest2(AbstractTeamServerServlet.java:1768)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleRequest(AbstractTeamServerServlet.java:1642)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.service(AbstractTeamServerServlet.java:1555)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
at org.eclipse.equinox.http.registry.internal.ServletManager$ServletWrapper.service(ServletManager.java:180)
at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:90)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:75)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
at org.eclipse.equinox.servletbridge.BridgeServlet.service(BridgeServlet.java:121)
at com.ibm.team.repository.server.servletbridge.JazzServlet.service(JazzServlet.java:54)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:873)
at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
at java.lang.Thread.run(Thread.java:811)
FAILURE!
I tried again after adding my ID to the JazzAdmin group and I now get the following error:
SEVERE: General REST Exception: RestException executing: GET Artifact Feed, RC: 403, message: <html><head><title>Apache Tomcat/5.5.28 - Error report</title><sty><H1></style> </head><body><h1>HTTP Status 403 - </h1><HR><p><b>type</b> Status report</p><p><b>message</b> <u></u></p><p><b>description</b> <u>Access to the specified resource () has
been forbidden.</u></p><HR><h3>Apache Tomcat/5.5.28</h3></body></html>
FAILURE!
Both projects are as identical as I can make them in terms of permissions and settings. I have JazzAdmin on all instances and have all the roles available assigned to my ID. The command I'm using in RQMCopyUtility is the same for both projects (default, copy everything)
I'm trying to copy data from one RQM instance to another. I'm using the RQMCopyUtility 2.0.1 iFix 3
On my source instance I have 2 projects. When copying from one project I'm able to copy data to my target instance but when I try to copy from the other project I get the following error:
SEVERE: General REST Exception: RestException executing: GET Artifact Feed, RC: 500, message: com.ibm.team.repository.common.PermissionDeniedException: CRJAZ131
6I Illegal read access: User "bturetz@us.ibm.com" attempted to read item(s) having the following type(s): ProjectArea
at com.ibm.team.repository.service.internal.ComponentRepositoryItemService.fetchItem(ComponentRepositoryItemService.java:498)
at com.ibm.rqm.integration.service.IntegrationServiceURI.getProjectArea(IntegrationServiceURI.java:413)
at com.ibm.rqm.integration.service.internal.IntegrationService.checkPermissions(IntegrationService.java:812)
at com.ibm.rqm.integration.service.internal.IntegrationService.handleRequest(IntegrationService.java:393)
at com.ibm.rqm.integration.service.internal.IntegrationService.perform_GET(IntegrationService.java:171)
at com.ibm.team.repository.service.TeamRawService.service(TeamRawService.java:82)
at sun.reflect.GeneratedMethodAccessor237.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.invoke(ExportProxyServiceRecord.java:370)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.access$0(ExportProxyServiceRecord.java:356)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord$ExportedServiceInvocationHandler.invoke(ExportProxyServiceRecord.java:56)
at $Proxy457.service(Unknown Source)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.doRestService(AbstractTeamServerServlet.java:879)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleRequest2(AbstractTeamServerServlet.java:1768)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleRequest(AbstractTeamServerServlet.java:1642)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.service(AbstractTeamServerServlet.java:1555)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
at org.eclipse.equinox.http.registry.internal.ServletManager$ServletWrapper.service(ServletManager.java:180)
at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:90)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:75)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
at org.eclipse.equinox.servletbridge.BridgeServlet.service(BridgeServlet.java:121)
at com.ibm.team.repository.server.servletbridge.JazzServlet.service(JazzServlet.java:54)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:873)
at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
at java.lang.Thread.run(Thread.java:811)
FAILURE!
I tried again after adding my ID to the JazzAdmin group and I now get the following error:
SEVERE: General REST Exception: RestException executing: GET Artifact Feed, RC: 403, message: <html><head><title>Apache Tomcat/5.5.28 - Error report</title><sty><H1></style> </head><body><h1>HTTP Status 403 - </h1><HR><p><b>type</b> Status report</p><p><b>message</b> <u></u></p><p><b>description</b> <u>Access to the specified resource () has
been forbidden.</u></p><HR><h3>Apache Tomcat/5.5.28</h3></body></html>
FAILURE!
Both projects are as identical as I can make them in terms of permissions and settings. I have JazzAdmin on all instances and have all the roles available assigned to my ID. The command I'm using in RQMCopyUtility is the same for both projects (default, copy everything)
6 answers
Tried a different access method and got a better error message.
Tried to access stuff via direct REST API using firefox addon Poster and got this error:
<html><body>File Upload Response:403,Insufficient privileges. XML Import permission is required.</body></html>
As far as I can see XML Import (and Export) is granted. I went ahead an explicitly granted it for all roles defined and tried again and I still get the same error.
Tried to access stuff via direct REST API using firefox addon Poster and got this error:
<html><body>File Upload Response:403,Insufficient privileges. XML Import permission is required.</body></html>
As far as I can see XML Import (and Export) is granted. I went ahead an explicitly granted it for all roles defined and tried again and I still get the same error.
Bowen, Can you check the configuration for your project area at https://server/jazz/admin to make sure that your user account is a member of the project area and has XML Export and XML Import permissions?
Hi thanks for the response. Yes, I'm both a member of the team and have a role with the XML import/export permission enabled