cancel
Showing results for 
Search instead for 
Did you mean: 

WPC - Access denied

modish
Explorer
0 Kudos

Hi Experts,

I am working on SAP EP 7.3 EHP1.

I have created a page and assigned it to a role as connection. I have assigned this role to a test user.

The test user is able to see the page in the portal, but there seems to be something wrong as an error is logged simultaneously in NWA. I have provided the log trace in the discussion below.

I have also observed that when I assign 'Administrator' role to the test user, the error is not logged.

Any helpful pointer will be appreciated!

Thanks,

Vikash

Error Trace

-------------------------------------------------------------------------

Exception caught while invoking getCustomImplementation with type 'com.sap.portal.pcm.admin.IAttributeSet'
[EXCEPTION]
javax.naming.MalformedLinkException: Access denied (Object(s): com.sap.portal.system/pcc/rt_content/com.sap.portal.pcc/StagingAreaId/<VENDOR>/VendorPortal/WelcomePage) [Root exception is com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): com.sap.portal.system/pcc/rt_content/com.sap.portal.pcc/StagingAreaId/<VENDOR>/VendorPortal/WelcomePage)]; Link Remaining Name: 'null'
at com.sapportals.portal.pcd.gl.PcdProxyContext.resolveLink(PcdProxyContext.java:2335)
at com.sapportals.portal.pcd.gl.PcdProxyContext.proxyLookup(PcdProxyContext.java:2137)
at com.sapportals.portal.pcd.gl.PcdProxyContext.lookup(PcdProxyContext.java:1843)
at com.sapportals.portal.pcd.gl.PcdGlContext.lookup(PcdGlContext.java:120)
at com.sapportals.portal.pcd.gl.PcdProxyContext.lookup(PcdProxyContext.java:1824)
at com.sapportals.portal.pcd.gl.PcdProxyContext.lookup(PcdProxyContext.java:1810)
at javax.naming.InitialContext.lookup(InitialContext.java:392)
at javax.naming.InitialContext.lookup(InitialContext.java:392)
at com.sap.portal.admin.util.pcm.PcmUtil.lookupObject(PcmUtil.java:257)
at com.sap.portal.admin.util.pcm.PcmUtil.loadObject(PcmUtil.java:276)
at com.sap.portal.admin.util.pcm.PcmUtil.loadObject(PcmUtil.java:311)
at com.sap.portal.semantic.shortcut.ShortcutService.getAdminBase(ShortcutService.java:252)
at com.sap.portal.semantic.shortcut.ShortcutAdminBase.getCustomImplementation(ShortcutAdminBase.java:50)
at com.sap.portal.pcm.admin.PcmAdminBase.getImplementation(PcmAdminBase.java:642)
at com.sap.portal.semantic.shortcut.ShortcutObjectFactory.getObjectInstance(ShortcutObjectFactory.java:59)
at com.sap.tc.pcd.proxies.JndiProxy.getObjectInstance(JndiProxy.java:69)
at com.sapportals.portal.pcd.gl.PcdGlContext.getSemanticObject(PcdGlContext.java:962)
at com.sapportals.portal.pcd.gl.GlObjectSearchResultEnumeration.nextInt(GlObjectSearchResultEnumeration.java:553)
at com.sapportals.portal.pcd.gl.GlObjectSearchResultEnumeration.hasMore(GlObjectSearchResultEnumeration.java:781)
at com.sapportals.portal.pcd.gl.GlObjectSearchResultEnumeration.hasMoreElements(GlObjectSearchResultEnumeration.java:822)
at com.sapportals.portal.pcd.pcm.roles.RoleNavigationImpl$NavigationNodeEnumeration.nextChecked(RoleNavigationImpl.java:233)
at com.sapportals.portal.pcd.pcm.roles.RoleNavigationImpl$NavigationNodeEnumeration.<init>(RoleNavigationImpl.java:152)
at com.sapportals.portal.pcd.pcm.roles.RoleNavigationImpl.listBindings(RoleNavigationImpl.java:324)
at com.sapportals.portal.pcd.pcm.roles.RoleNavigationImpl.listBindings(RoleNavigationImpl.java:307)
at com.sapportals.portal.navigation.NavigationNode.getChildrenBeforeMerge(NavigationNode.java:517)
at com.sapportals.portal.navigation.NavigationNode.getChildren(NavigationNode.java:617)
at com.sapportals.portal.navigation.NavigationNode.getChildren(NavigationNode.java:534)
at com.sapportals.portal.navigation.NavigationEventsHelperService.getNavNodesPathIndexesList(NavigationEventsHelperService.java:2556)
at com.sapportals.portal.navigation.NavigationEventsHelperService.getNavNodesPathIndexesList(NavigationEventsHelperService.java:2527)
at com.sapportals.portal.navigation.fpm.NavigationFpmListener.getPathIndexes(NavigationFpmListener.java:1067)
at com.sapportals.portal.navigation.fpm.NavigationFpmListener.addToHistory(NavigationFpmListener.java:993)
at com.sapportals.portal.navigation.fpm.NavigationFpmListener.doNavigatePhase(NavigationFpmListener.java:448)
at com.sapportals.portal.navigation.fpm.NavigationFpmListener.doPhase(NavigationFpmListener.java:117)
at com.sapportals.portal.pb.fpm.FPMContainer.distributeEvent(FPMContainer.java:63)
at com.sapportals.portal.pb.fpm.FPM.doDocumentHook(FPM.java:179)
at com.sapportals.portal.prt.service.document.DocumentHookMulticaster.doDocumentHook(DocumentHookMulticaster.java:100)
at com.sapportals.portal.prt.service.document.DocumentHookMulticaster.doDocumentHook(DocumentHookMulticaster.java:99)
at com.sapportals.portal.prt.service.document.DocumentHookService.doDocumentHook(DocumentHookService.java:119)
at com.sapportals.portal.prt.service.document.DocumentHookServiceNew.doDocumentHook(DocumentHookServiceNew.java:186)
at com.sapportals.portal.prt.connection.PortalHook.doDocumentHook(PortalHook.java:665)
at com.sap.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:183)
at com.sap.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:107)
at com.sap.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:141)
at com.sap.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:206)
at com.sap.portal.prt.pom.PortalNode.service(PortalNode.java:588)
at com.sap.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:233)
at com.sap.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:107)
at com.sap.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:141)
at com.sap.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:520)
at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:202)
at com.sap.portal.prt.dispatcher.DispatcherServlet.service(DispatcherServlet.java:132)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:202)
at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:103)
at com.sap.portal.http.EnrichNavRequestFilter.doFilter(EnrichNavRequestFilter.java:49)
at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.sap.portal.prt.dispatcher.CustomHeaderFilter.doFilter(CustomHeaderFilter.java:58)
at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.sap.portal.http.EnrichNavRequestFilter.doFilter(EnrichNavRequestFilter.java:49)
at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:432)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:210)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:441)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:430)
at com.sap.engine.services.servlets_jsp.filters.DSRWebContainerFilter.process(DSRWebContainerFilter.java:38)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.servlets_jsp.filters.ServletSelector.process(ServletSelector.java:81)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.servlets_jsp.filters.ApplicationSelector.process(ApplicationSelector.java:278)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.WebContainerInvoker.process(WebContainerInvoker.java:81)
at com.sap.engine.services.httpserver.chain.HostFilter.process(HostFilter.java:9)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.ResponseLogWriter.process(ResponseLogWriter.java:60)
at com.sap.engine.services.httpserver.chain.HostFilter.process(HostFilter.java:9)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.DefineHostFilter.process(DefineHostFilter.java:27)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.MonitoringFilter.process(MonitoringFilter.java:29)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.SessionSizeFilter.process(SessionSizeFilter.java:26)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.MemoryStatisticFilter.process(MemoryStatisticFilter.java:57)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.filters.DSRHttpFilter.process(DSRHttpFilter.java:43)
at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)
at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)
at com.sap.engine.services.httpserver.server.Processor.chainedRequest(Processor.java:475)
at com.sap.engine.services.httpserver.server.Processor$FCAProcessorThread.process(Processor.java:269)
at com.sap.engine.services.httpserver.server.rcm.RequestProcessorThread.run(RequestProcessorThread.java:56)
at com.sap.engine.core.thread.execution.Executable.run(Executable.java:122)
at com.sap.engine.core.thread.execution.Executable.run(Executable.java:101)
at com.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run(CentralExecutor.java:328)
Caused by: com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): com.sap.portal.system/pcc/rt_content/com.sap.portal.pcc/StagingAreaId/<VENDOR>/VendorPortal/WelcomePage)
at com.sapportals.portal.pcd.gl.PcdPersContext.filteredLookup(PcdPersContext.java:790)
at com.sapportals.portal.pcd.gl.PcdPersContext.deepFilteredLookup(PcdPersContext.java:618)
at com.sapportals.portal.pcd.gl.PcdFilterContext.filterLookup(PcdFilterContext.java:488)
at com.sapportals.portal.pcd.gl.PcdProxyContext.recursiveLookup(PcdProxyContext.java:2086)
at com.sapportals.portal.pcd.gl.PcdProxyContext.proxyLookupLink(PcdProxyContext.java:2189)
at com.sapportals.portal.pcd.gl.PcdProxyContext.proxyLookup(PcdProxyContext.java:2125)
at com.sapportals.portal.pcd.gl.PcdProxyContext.lookup(PcdProxyContext.java:1843)
at com.sapportals.portal.pcd.gl.PcdGlContext.lookup(PcdGlContext.java:120)
at com.sapportals.portal.pcd.gl.PcdProxyContext.lookup(PcdProxyContext.java:1824)
at com.sapportals.portal.pcd.gl.url.BaseURLContext.lookup(BaseURLContext.java:265)
at javax.naming.InitialContext.lookup(InitialContext.java:392)
at javax.naming.InitialContext.lookup(InitialContext.java:392)
at com.sapportals.portal.pcd.gl.PcdProxyContext.resolveLink(PcdProxyContext.java:2323)
... 96 more



Accepted Solutions (0)

Answers (3)

Answers (3)

Former Member
0 Kudos

Yes similar issues with permission I too had encountered in NW 7.3

Once activated, the issue gets resolved. Hence I believe just visit the permissions, check then unchceck, save as before would help.

mhimburg
Discoverer
0 Kudos

Hello Vikash,

I could solve the same problem in my case. I did the workaround discribed by Satish and saw, if I'm select "End User Permissions" from the dropdown the first time after connecting to a role the "End User Permission" are not assigned.

Then I do his workaround and after switching back to "Assign all roles: grant permission to all users and groups assigned to any role connected to the area" all end user permission were assigned and everything work fine.

I tested it with another area and it works again. You do not even have to assign a user, group, etc., just activate once manually and then re-enable the automatic assignment.


Regards,

Marcel

Steffi_Warnecke
Active Contributor
0 Kudos

Hello Vikash,

is the "End User"-mark for the Group "Everyone" checked in the permission-tab of the new role?

Regards,

Steffi.

modish
Explorer
0 Kudos

Hi Steffi,

Yes, it is already there.

Thanks,

Vikash

Steffi_Warnecke
Active Contributor
0 Kudos

Hello Vikash,

do you have this problem with every wpc-side or just this one? Is there content on the page, like a picture, that could also be restricted by permissions?

Also do you know the note 1635419 - Access Denied Exception for Web Page Resources?

I know it's for 7.0, but there seems to be no newer version for this.

Regards,

Steffi.

anja_engelhardt2
Active Contributor
0 Kudos

moved to by moderator

modish
Explorer
0 Kudos

Hi Steffi,

There is an image on the page, placed in global share folder. But just to check, I removed the image from the page, but issue is still the same.

I have already gone through note 1635419, but in 7.3, I can not find 'Security Zone' folder similar to that in 7.0

Thanks,

Vikash

Steffi_Warnecke
Active Contributor
0 Kudos

Hello Vikash,

could you check in the Security Zones-folder for the "sap.com"-folder and in there for "Netweaver.KMC"? Then "low_safety", because in there I found in our system at least one entry for a WPC-component. Maybe you'll have some more in there.

Regards,

Steffi.

modish
Explorer
0 Kudos

Hi Steffi,

I have already tried to assign permission to Every user group in all the *.pcc.* folders under the location mentioned by you, but no luck !

Vikash.

Former Member
0 Kudos

Hi Vikash,

I am facing the same issue. Did you found any solution for this. Could you please share ?


Regards,

Satish

Steffi_Warnecke
Active Contributor
0 Kudos

Hello Vikash,

any news? I would open an OSS ticket with SAP and point to the above note (if you didn't already try that^^).

Regards,

Steffi.

Former Member
0 Kudos

Hi Steffi,

I am able to fix this by assigning End user permissons for the Area.

Please try below process

Navigate to Area Management -> Select the Area for which you want to assign permissions -> From the dropdown select "End User Permissions" and click on Edit.

Scroll down and under "Assignment of End User Permissions to Area", select option "Manual: grant permission by assigning specific users, groups and roles"  and assign your group or role.

Save and test it.

Regards,

Satish

Steffi_Warnecke
Active Contributor
0 Kudos

Hello Satish,

thank you, but it was Vikash, who had the problem. I hope, he sees your post to try it.

Regards,

Steffi

mhimburg
Discoverer
0 Kudos

Hello Satish,

hello Steffi,

@Satish: Thank you and this workaround solves the problem but if anybody knows a way without assigning every area for it's own i would be gratefull. I think the point with the safety zones was all right.

@Steffi: Did you get an answer from your OSS ticket, maybe with another solution?

Regards,

Marcel

Steffi_Warnecke
Active Contributor
0 Kudos

Hello Marcel,

I don't have that problem. ^^ It was my suggestion, that the OP should open a ticket with SAP.

Regards,

Steffi.