It's all about the answers!

Ask a question
QuestionsTagsUsersBadges
Guidelines | FAQ
Follow this question
Question details

×42,844

question asked: Oct 20 '08, 11:32 a.m.
question was seen: 5,513 times
last updated: Oct 20 '08, 11:32 a.m.

Related questions

Permissions Error Deploying Process Definition

0
Shelby Phillips (296●2●46●21) | asked Oct 20 '08, 11:32 a.m.
Hello -

I am receiving a permissions error when attempting to deploy process definitions from my user in Eclipse and via the web interface. The error message states that the "JazzAdmins" role is required to perform this action.

When I view my user in the user editor in both the Eclipse and Web interfaces, I see the JazzAdmins box is checked.

This box is also greyed out, as I am using LDAP groups to authenticate.

Please advise.

10 answers

Most liked answers ↑|Newest answers|Oldest answers

0
permanent link
Matt Lavin (2.7k●2) | answered Oct 20 '08, 11:50 a.m.
FORUM MODERATOR / JAZZ DEVELOPER
To resolve the issue when using LDAP, your user need to be in the LDAP
group that you have mapped to the JazzAdmins role. RTC cannot modify
the LDAP groups, so you'll need to modify the LDAP groups with whatever
tool is available for your LDAP setup.

Matt Lavin
Jazz Server Team


shelbyph wrote:
Hello -

I am receiving a permissions error when attempting to deploy process
definitions from my user in Eclipse and via the web interface. The
error message states that the "JazzAdmins" role is required
to perform this action.

When I view my user in the user editor in both the Eclipse and Web
interfaces, I see the JazzAdmins box is checked.

This box is also greyed out, as I am using LDAP groups to
authenticate.

Please advise.
0
permanent link
Shelby Phillips (296●2●46●21) | answered Oct 20 '08, 2:15 p.m.
My user is in the LDAP group that is mapped to the JazzAdmins role.

To resolve the issue when using LDAP, your user need to be in the LDAP
group that you have mapped to the JazzAdmins role. RTC cannot modify
the LDAP groups, so you'll need to modify the LDAP groups with whatever
tool is available for your LDAP setup.

Matt Lavin
Jazz Server Team
0
permanent link
Balaji Krish (1.8k●1●2) | answered Oct 20 '08, 3:16 p.m.
JAZZ DEVELOPER
The roles for a user displayed in Eclipse and Web UI are based on the information you provided in LDAP page in the setup wizard (https://setverName:9443/jazz/setup). But the authentication or authorization is from the information you provided while configuring the realm in the container (Tomcat / WebSphere).

Can you provide the following information:
1. Are you using Tomcat or WebSphere
2. Do you see any differences between the information present in server.xml and LDAP setup wizard (for e.g. group member attribute)

---- Balaji
Jazz Server Team

My user is in the LDAP group that is mapped to the JazzAdmins role.

To resolve the issue when using LDAP, your user need to be in the LDAP
group that you have mapped to the JazzAdmins role. RTC cannot modify
the LDAP groups, so you'll need to modify the LDAP groups with whatever
tool is available for your LDAP setup.

Matt Lavin
Jazz Server Team
0
permanent link
Shelby Phillips (296●2●46●21) | answered Oct 20 '08, 3:30 p.m.
1. tomcat.
2. No difference.
0
permanent link
Balaji Krish (1.8k●1●2) | answered Oct 21 '08, 11:56 a.m.
JAZZ DEVELOPER
Are you able to access https://{your server}:9443/jazz/admin or https://{your server}:9443/jazz/setup ?

Did you set roleSubtree=true and userSubTree=true in your server.xml ?

For e.g :
<Realm>

---- Balaji
Jazz Server Team


1. tomcat.
2. No difference.
0
permanent link
Balaji Krish (1.8k●1●2) | answered Oct 21 '08, 2:41 p.m.
JAZZ DEVELOPER
Looks like the example was not displayed correctly in my previous message..


Realm className="org.apache.catalina.realm.JNDIRealm"
debug="9"
connectionURL="ldap://ldapserver:389"
userBase="ou=Jazz,o=ibm.com"
userSearch="(mail={0})"
userSubtree="true"
roleBase="ou=people,o=ibm.com"
roleSubtree="true"
roleSearch="(members={0})"
roleName="cn"
/>

Are you able to access https://{your server}:9443/jazz/admin or https://{your server}:9443/jazz/setup ?

Did you set roleSubtree=true and userSubTree=true in your server.xml ?

For e.g :
<Realm>

---- Balaji
Jazz Server Team


1. tomcat.
2. No difference.
0
permanent link
Shelby Phillips (296●2●46●21) | answered Oct 22 '08, 12:01 p.m.
Both of these values are set to "true"

I am able to access both the ADMIN and SETUP web interfaces.
0
permanent link
Balaji Krish (1.8k●1●2) | answered Oct 22 '08, 3:05 p.m.
JAZZ DEVELOPER
You are able to view the Admin and setup page. So, you have JazzAdmins role from both Jazz and WAS auth module perspectives. I am not sure why process editor is complaining that you need to have JazzAdmins role to perform the operation.

I will pass this message to the process team.

--- Balaji
Jazz Server Team

Both of these values are set to "true"

I am able to access both the ADMIN and SETUP web interfaces.
0
permanent link
Darin Swanson (316●1) | answered Oct 24 '08, 1:34 p.m.
Reviewing this thread I cannot see why you are having a problem deploying
the process definitions.
Can you please log a workitem (with screenshots to help with diagnosis) and
we will investigate further.

Thank you
Darins
Jazz Process Team

"balajik" <balajik> wrote in message
news:gdntmd$e7b$1@localhost.localdomain...
You are able to view the Admin and setup page. So, you have JazzAdmins
role from both Jazz and WAS auth module perspectives. I am not sure
why process editor is complaining that you need to have JazzAdmins
role to perform the operation.

I will pass this message to the process team.

--- Balaji
Jazz Server Team

shelbyphwrote:
Both of these values are set to "true"

I am able to access both the ADMIN and SETUP web interfaces.
0
permanent link
Shelby Phillips (296●2●46●21) | answered Oct 28 '08, 3:19 p.m.
https://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/63478

Your answer

Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.