PermissionControlException: Access is denied error for VC application through portal (pcd:com.sap.portal.system/gpal_hidden_content/gwd)

[vinay_baji2]

Hi All,

We have recently upgraded from EP 7.0 to 7.3 and along with it, we've also moved our VC to 7.3 SPS7. Post the upgrade activities for the VC application created on our end, we are unable to view the content and get the error as:

******************************************************

The initial exception that
caused the request to fail, was:

com.sapportals.portal.pcd.gl.PermissionControlException:
Access denied (Object(s): com.sap.portal.system/gpal_hidden_content/gwd/componentname_impl/com.sap.componentname_impl.applicationname_base

Failed to process request.
Please contact your system administrator.

While processing the current request, an exception occured which could not be
handled by the application or the framework.

If the information contained on this page doesn't help you to find and
correct the cause of the problem, please contact your system administrator. To
facilitate analysis of the problem, keep a copy of this error page. Hint: Most
browsers allow to select all content, copy it and then paste it into an empty
document (e.g. email or simple text file).

For further information about the Web Dynpro error page, error analysis and a
description of well-known error situations, see SAP note 1113811.

Correction Hints

Exception could be caused by the development component: tc~wd~webdynpro

****************************

The above error does not appear in case the user has administrator/content admin access. However, in the absence of these roles, the user gets the error message. Can anyone please provide your valuable inputs on what could be the possible cause for this issue?

We have already tried out an option of creating a test role and assigning the application (which was pasted as a PCD object in portal content) to this role. Now the main page of the application works when it is maintained as default entry for folder under the role, however when the links that navigate to the sub-pages of the applications are clicked, we get the above error message again.

We have assigned the 'Everyone' Group to the identified application based on its path(that appeared in the Web Dynpro Java Applications) and its parent component too and also verified if the tester has the everyone group assigned.

Apart from this, We've also checked the note 1531137, but not of much use. Is there any operation that was missed on our end? Kindly provide your inputs.

[Former Member · Accepted solution]

Hi,

Can you please try below steps.

1. Logon with an Administrator user to the Portal.

2. Navigate to "System Administration" -> "System Configuration" -> "System Landscape".

3. Locate the system specified in the error message in the "Portal Content" tree.

4. Right-click on the system selecting "Open" -> "Permissions".

5. Search for the "Everyone" in "Groups" (make sure not to search for the "Role" of the same name!).

6. "Add" the group "Everyone" to the "Assigned Permissions" list.

7. In the "Administrator" drop down, select "None" and make sure that the "End User" checkbox is selected (important!)

8. "Save" your changes.

Thanks

Rishi Abrol

[vinay_baji2 · Accepted solution]

Hi Rishi,

Thanks a lot for responding to this; these though, have been maintained already. However, we still get the same problem. Let me provide few more details with respect to the application and the steps taken.

A deployed webdynpro java application was pasted as a pcd object and the link generated from the page has been added in an html. When the user clicks on the link, it opens in a new browser window where this message displays.

We have checked the permissions for Portal Content, then, we also checked the permissions for the folder where the pages for this application have been saved. Apart from this, even the WebDynpro Java application has been provided permissions for 'everyone' group. In fact, we have also added everyone role, as a possibility and assigned permissions to that too. Still the new browser window throws us this error message.

In the ongoing process, we had created a test role and assigned the page to it. This role when provided to the test user works without user having the administrator role. However, there are links within the first page of the application, which when clicked open another page in a new window. This window again throws us the same error message.

The error in all possibility appears to be related to access and permissions, but there is something still that has been missed. Can you please provide any additional inputs that you can provide on this issue.

Thanks a ton!!

Best Regards,

Vinay

[saar_dagan · Accepted solution]

Hi Vinay,

I think the problem is in the deployment of the application itself.

I would suggest undeploy and then redeploy (not override).

BR,

Saar

[gitit_sagiv · Accepted solution]

Hi Vinay,

I would recommend checking whether the initialpermissions.xml (which contains permissions configuration for "pcd:com.sap.portal.system/gpal_hidden_content”) ran successfully as part of the upgrade to 7.3.

You can confirm it by checking the “run” flag of initialPermissionService (if its “false” it means that the initialpermissions.xml ran successfully and it should not be executed again). For more details refer to http://scn.sap.com/docs/DOC-31232 (section C).

Regards,

Gitit

[vinay_baji2]

The problem lied with the method of calling the VC application. Issue appeared as the application was called based on the preview of the deployed iview. Correction worked.