BRM API:authorized required to read the project

[Former Member]

Dear Team,

I am trying to edit BRM decision Tables using BRM API.

I am getting the below runtime exception ,even after providing full access to the user for that BRM DC in NWA->Configuration->Security->Identity Management->Business Role Access Control->Select BRM DC->Select Role assigned to that user id->EDIT->DC Access Type: FULL->Save

Runtime Exception:

“User is not authorized to read the project”

Below is the code that I have written.

                try{

DefaultRulesEditAPIFactory apiInstance = DefaultRulesEditAPIFactory.getInstance();

      RulesEditAPI  api = apiInstance.getAPI();

      //Getting the Project    

       String projectName = "demo.com~myrules";

       IProject project = api.getProject(projectName);

}catch(Exception e)

      {

       wdComponentAPI.getMessageManager().reportException(""+e.getLocalizedMessage());

      }

Is there any access or authoriasyion missing to access the project

Regards,

Shamila S

[benjamin_notheis · Accepted solution]

Dear Shami

Please note that access control in BRM is twofold:

1. Access control on object level (cf. Setting Access Control for Business Rules Project - Working with the Rules Manager - SAP Library😞 This seems to be what you have already done. Nevertheless, please double-check that you have set access levels on the proper objects in case hierarchies apply.
2. Global permissions to access rules at runtime (a.k.a. Rules Manager - cf. Setting Authorizations in Business Rules Management - Working with the Rules Manager - SAP Library😞 I can only suspect, but you may need to have the same permissions granted for the user invoking the BRM APIs, as if the user would deal with the Rules Manager directly. I admit that this is nowhere explicitly stated in the relevant documentation (cf. Working with Rules Edit APIs - Modeling Rules with Rules Composer - SAP Library).

If this does not help, might be able to help.

Cheers, Benny

[Former Member · Accepted solution]

Dear Songa,

I assigned action "NWA_SUPERADMIN_BRMS_ACM", but still i am getting the same error.

Kindly help me in gettig this error correcteed.

Regards,

Shamila S

[Jocelyn_Dart · Accepted solution]

Hi Shami I think you had best raise a SAP message now. There's apparently some additional API permission needed so best to get official advice/SAP Note for that

Rgds

Jocelyn

[benjamin_notheis · Accepted solution]

I asked one of our BRM experts to take a look at this forum post.

[Jocelyn_Dart · Accepted solution]

Great but Shami give the guy a break & raise a SAP Message anyway - that'll cover his time if we need to get a note created

[Jocelyn_Dart · Accepted solution]

Great but Shami give the guy a break & raise a SAP Message anyway - that'll cover his time if we need to get a note created

[Former Member · Accepted solution]

Dear Jocelyn,

As suggessted I have raised a SAP Message.

Regards,

Shamila S

[songavenkatrami_reddy · Accepted solution]

Dear Shamila,

I am sorry for the delay in responding to you.

The "FULL" permission that you have given in NWA at NWA->Configuration->Security->Identity Management->Business Role Access Control->Select BRM DC  is to modify rules using Rules Manager tool and this does not help you to read rules project from repository(Database) and commit changes to repository.

To read rules project from repository and commit updated content to repository using Public API, the logged-in user should have following actions assigned through a role.

SAP_BRM_API_READ

SAP_BRM_API_EDIT

Thanks and Regards,

Venkat

[Former Member · Accepted solution]

Dear Venkat,

After adding the given action i am not getting error.

Reagrds,

Shamila S

[Jocelyn_Dart · Accepted solution]

Hi Shamila, Would you please add the solution to the SAP Message you raised.  It would really be much better if these actions were assigned to a predefined role rather than have to select individual actions, so perhaps you can suggest that this be fixed.

Regards,

Jocelyn

[Former Member · Accepted solution]

Dear Jocelyn,

SAP has suggested to create custom role and attach the required actions as they are currently not avaliable in any standard role.

Reagrds,

Shamila S

[former_member270864]

Hi Venkat,

I get a Commit Exception on the BRM EDIT API as below. It talks of a lock and I dont see any locks in the system:

[EXCEPTION]

com.sap.brms.rulesedit.RulesEditAPIException: Committing of

project to the repository failed : Exception during

internalDeploy(AbstractProject, AbstractAliasSet, AbstractRuleset,

AbstractAliasSet, Map, Map, Properties, boolean)

at

com.sap.brms.rulesedit.helper.RulesEditAPIContext.updateRuleset(RulesEditAPIContext.java:163)

at

com.sap.brms.rulesedit.impl.ProjectImpl.commitRulesets(ProjectImpl.java:110)

at

com.sap.brms.rulesedit.impl.ProjectImpl.commit(ProjectImpl.java:42)

at

com.bac.ejb.edit.brm.dt.EditDecisionTableBean.addRowsToDT_CompCountDT(EditDecisionTableBean.java:88)

at

sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at

sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at

sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at

java.lang.reflect.Method.invoke(Method.java:597)

at

com.sap.engine.services.ejb3.runtime.impl.RequestInvocationContext.proceedFinal(RequestInvocationContext.java:47)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:166)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_StatesTransition.invoke(Interceptors_StatesTransition.java:19)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_Resource.invoke(Interceptors_Resource.java:50)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_Transaction.doWorkWithAttribute(Interceptors_Transaction.java:37)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_Transaction.invoke(Interceptors_Transaction.java:21)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_MethodRetry.invoke(Interceptors_MethodRetry.java:46)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:191)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_StatelessInstanceGetter.invoke(Interceptors_StatelessInstanceGetter.java:23)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_SecurityCheck.invoke(Interceptors_SecurityCheck.java:25)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_ExceptionTracer.invoke(Interceptors_ExceptionTracer.java:17)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.DefaultInvocationChainsManager.startChain(DefaultInvocationChainsManager.java:138)

at

com.sap.engine.services.ejb3.runtime.impl.DefaultEJBProxyInvocationHandler.invoke(DefaultEJBProxyInvocationHandler.java:164)

at

com.sun.proxy.$Proxy2541.addRowsToDT_CompCountDT(Unknown Source)

at

sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at

sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at

sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at

java.lang.reflect.Method.invoke(Method.java:597)

at

com.sap.ejbexplorer.business.beans.MethodInvokerBean.invokeBeanMethod(MethodInvokerBean.java:68)

at

sun.reflect.GeneratedMethodAccessor964.invoke(Unknown Source)

at

sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at

java.lang.reflect.Method.invoke(Method.java:597)

at

com.sap.engine.services.ejb3.runtime.impl.RequestInvocationContext.proceedFinal(RequestInvocationContext.java:47)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:166)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_StatesTransition.invoke(Interceptors_StatesTransition.java:19)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_Resource.invoke(Interceptors_Resource.java:50)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_Transaction.doWorkWithAttribute(Interceptors_Transaction.java:37)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_Transaction.invoke(Interceptors_Transaction.java:21)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_MethodRetry.invoke(Interceptors_MethodRetry.java:46)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:191)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_StatelessInstanceGetter.invoke(Interceptors_StatelessInstanceGetter.java:23)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_SecurityCheck.invoke(Interceptors_SecurityCheck.java:25)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.Interceptors_ExceptionTracer.invoke(Interceptors_ExceptionTracer.java:17)

at

com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:179)

at

com.sap.engine.services.ejb3.runtime.impl.DefaultInvocationChainsManager.startChain(DefaultInvocationChainsManager.java:138)

at

com.sap.engine.services.ejb3.runtime.impl.DefaultEJBProxyInvocationHandler.invoke(DefaultEJBProxyInvocationHandler.java:164)

at

com.sun.proxy.$Proxy2434.invokeBeanMethod(Unknown Source)

at

com.sap.ejbexplorer.business.invocation.Invoker.invoke(Invoker.java:45)

at

com.sap.ejbexplorer.business.invocation.impl.Query.execute(Query.java:80)

at

com.sap.ejbexplorer.wdgui.ExplorerView.onActionExecuteQuery(ExplorerView.java:976)

at

com.sap.ejbexplorer.wdgui.wdp.InternalExplorerView.wdInvokeEventHandler(InternalExplorerView.java:527)

at

com.sap.tc.webdynpro.progmodel.generation.DelegatingView.invokeEventHandler(DelegatingView.java:142)

at

com.sap.tc.webdynpro.progmodel.controller.Action.fire(Action.java:75)

at

com.sap.tc.webdynpro.clientserver.phases.ProcessingEventPhase.doHandleActionEvent(ProcessingEventPhase.java:159)

at

com.sap.tc.webdynpro.clientserver.phases.ProcessingEventPhase.execute(ProcessingEventPhase.java:94)

at

com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequestPartly(WindowPhaseModel.java:162)

at

com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doProcessRequest(WindowPhaseModel.java:110)

at

com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:97)

at

com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:515)

at

com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:58)

at

com.sap.tc.webdynpro.clientserver.cal.ClientApplication.doExecute(ClientApplication.java:1671)

at

com.sap.tc.webdynpro.clientserver.cal.ClientApplication.doProcessing(ClientApplication.java:1485)

at

com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doApplicationProcessingStandalone(ApplicationSession.java:908)

at

com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doApplicationProcessing(ApplicationSession.java:880)

at

com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:357)

at

com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:326)

at

com.sap.tc.webdynpro.serverimpl.core.AbstractDispatcherServlet.doContent(AbstractDispatcherServlet.java:87)

at

com.sap.tc.webdynpro.serverimpl.wdc.DispatcherServlet.doContent(DispatcherServlet.java:89)

at

com.sap.tc.webdynpro.serverimpl.core.AbstractDispatcherServlet.doPost(AbstractDispatcherServlet.java:62)

at

javax.servlet.http.HttpServlet.service(HttpServlet.java:754)

at

javax.servlet.http.HttpServlet.service(HttpServlet.java:847)

at

com.sap.engine.services.servlets_jsp.server.Invokable.invoke(Invokable.java:152)

at

com.sap.engine.services.servlets_jsp.server.Invokable.invoke(Invokable.java:38)

at

com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:457)

at

com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:210)

at

com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:441)

at

com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:430)

at

com.sap.engine.services.servlets_jsp.filters.DSRWebContainerFilter.process(DSRWebContainerFilter.java:38)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.servlets_jsp.filters.ServletSelector.process(ServletSelector.java:81)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.servlets_jsp.filters.ApplicationSelector.process(ApplicationSelector.java:278)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.httpserver.filters.WebContainerInvoker.process(WebContainerInvoker.java:81)

at

com.sap.engine.services.httpserver.chain.HostFilter.process(HostFilter.java:9)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.httpserver.filters.ResponseLogWriter.process(ResponseLogWriter.java:60)

at

com.sap.engine.services.httpserver.chain.HostFilter.process(HostFilter.java:9)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.httpserver.filters.DefineHostFilter.process(DefineHostFilter.java:27)

at

com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.httpserver.filters.MonitoringFilter.process(MonitoringFilter.java:29)

at

com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.httpserver.filters.SessionSizeFilter.process(SessionSizeFilter.java:26)

at

com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.httpserver.filters.MemoryStatisticFilter.process(MemoryStatisticFilter.java:57)

at

com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.httpserver.filters.DSRHttpFilter.process(DSRHttpFilter.java:43)

at

com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12)

at

com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78)

at

com.sap.engine.services.httpserver.server.Processor.chainedRequest(Processor.java:475)

at

com.sap.engine.services.httpserver.server.Processor$FCAProcessorThread.process(Processor.java:269)

at

com.sap.engine.services.httpserver.server.rcm.RequestProcessorThread.run(RequestProcessorThread.java:56)

at

com.sap.engine.core.thread.execution.Executable.run(Executable.java:122)

at

com.sap.engine.core.thread.execution.Executable.run(Executable.java:101)

at

com.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run(CentralExecutor.java:328)

Caused

by: BusinessRules ERROR: com.sap.brms.qrules.engine.RuleException: Committing of

project to the repository failed : Exception during

internalDeploy(AbstractProject, AbstractAliasSet, AbstractRuleset,

AbstractAliasSet, Map, Map, Properties, boolean)

at

com.sap.brms.io.glxrr.BRMRuntimeRepoPersisitenceHandler.addAndUpdateRulesets(BRMRuntimeRepoPersisitenceHandler.java:157)

at

com.sap.brms.rulesedit.helper.RulesEditAPIContext.updateRuleset(RulesEditAPIContext.java:157)

...

120 more

Caused by: BusinessRules ERROR:

com.sap.brms.qrules.engine.RuleException: Exception during

internalDeploy(AbstractProject, AbstractAliasSet, AbstractRuleset,

AbstractAliasSet, Map, Map, Properties, boolean)

at

com.sap.brms.io.glxrr.BRMDatabaseRulePersistenceHandler.internalDeploy(BRMDatabaseRulePersistenceHandler.java:1714)

at

com.sap.brms.io.glxrr.BRMRuntimeRepoPersisitenceHandler.addAndUpdateRulesets(BRMRuntimeRepoPersisitenceHandler.java:155)

...

121 more

Caused by:

com.sap.glx.repository.exceptions.RuntimeRepositoryException:

com.sap.glx.repository.exceptions.EngineException: RTRep>  lock already set

for component 1e39802e04781b312cd60000001203ea avctivation failed for

deploymentId = 1e408a38-8516-110f-321f-0000001203ea

at

com.sap.glx.repository.service.impl.RuntimeRepositoryDeployManager.activate(RuntimeRepositoryDeployManager.java:650)

at

com.sap.brms.io.glxrr.BRMDatabaseRulePersistenceHandler.internalDeploy(BRMDatabaseRulePersistenceHandler.java:1711)

...

122 more

Caused by: com.sap.glx.repository.exceptions.EngineException:

RTRep>  lock already set for component 1e39802e04781b312cd60000001203ea

avctivation failed for deploymentId = 1e408a38-8516-110f-321f-0000001203ea

at

com.sap.glx.repository.service.impl.RuntimeRepositoryDeployManager.activate(RuntimeRepositoryDeployManager.java:613)

...

123 more

Caused by: com.sap.glx.repository.exceptions.LockingException:

RTRep>  could not get Main lock for deployment

1e39802e04781b312cd60000001203ea

at

com.sap.glx.repository.service.locking.impl.LockingManager.acquireLockForDeployment(LockingManager.java:266)

at

com.sap.glx.repository.service.impl.RuntimeRepositoryDeployManager.activate(RuntimeRepositoryDeployManager.java:607)

...

123 more

Caused by: com.sap.engine.frame.core.locking.LockException: Cannot

lock [I2014070811103369500000va2adsap410.................1180650,

$glx_runtime_repository_MAIN, 1e39802e04781b312cd60000001203ea, X]; it is in use

by the same owner. In case of lock mode "R" the lock propagation failed, because

the optimistic lock is gone.

at

com.sap.engine.core.locking.impl3.LockingManagerImpl.lockInternal(LockingManagerImpl.java:174)

at

com.sap.engine.core.locking.AbstractLockingManagerImpl.lock(AbstractLockingManagerImpl.java:466)

at

com.sap.engine.core.locking.ServerInternalLockingImpl.lock(ServerInternalLockingImpl.java:52)

at

com.sap.glx.repository.service.locking.impl.LockingManager.acquireLockForDeployment(LockingManager.java:262)

...

124 more

Regards,

MB

[songavenkatrami_reddy]

Dear Mahantesh Byadagi,

I hope you are calling BRM EDIT API from an EJB.

The RulesEditAPI is non Transactional. Hence when the RulesEditAPI is used from the EJB, it has to be annotated with TransactionalAttributeType as NEVER

(@TransactionAttribute(value=TransactionAttributeType.NEVER)).

Can you please follow the SAP Note 1883379 from the URL below?

http://service.sap.com/sap/support/notes/1883379

Thanks and Regards,

Venkat

[former_member270864]

Thanks Venkat. I had the annotation added but no luck.

Looks like the note is not released yet.

Thanks,

MB

[songavenkatrami_reddy]

Dear Mahantesh Byadagi,

Can you please let us know whether you are calling BRM API from an EJB or a WebDynpo?

Can you please create a customer message on BC-BMT-BRM component and provide version of NW BRM that you are using? Please attach the sample code which is calling BRM API.

Thanks and Regards,

Venkat

[former_member270864]

Hi Venkat,

I am calling it from an EJB.

I have the customer message open but inspite of having the actions assigned through a custom role, I still keep seeing the exception:

com.sap.brms.rulesedit.RulesEditAPIException: User is not authorized to read the

project

Not really sure what else is missing. Below is the sample code:

try{

  DefaultRulesEditAPIFactory apiInstance =DefaultRulesEditAPIFactory.getInstance();

  RulesEditAPI  api = apiInstance.getAPI();

  IProject project = api.getProject(RULES_PROJECT_NAME);

  IRuleset ruleset = project.getRuleset(RULESET_NAME);

  IDecisionTable dt = ruleset.getDecisionTable(DECISION_TABLE_NAME);

  IRuleset[] rulesets = new IRuleset[1];

  rulesets[0] = ruleset;

  IDecisionTableQuery  query = dt.createQuery();

  query.setConditionValue("Condition",ConditionValue);

  IDecisionTableRow dtRowAdd = dt.addRow(query);

  project.commit(rulesets , true);

}

Thanks,

MB

[songavenkatrami_reddy]

Dear Mahantesh Byadagi,

Is this authorization issue is a different one?

Have you assigned SAP_BRM_API_EDIT and SAP_BRM_API_READ actions to your custom role and assgined this custom role to the user?

Can you please make sure that your application asks for authentication and you should login with user have this role assigned.

By default, your application will be logged in with 'Guest' user. Please check this.

Thanks and Regards,

Venkat

[Jocelyn_Dart]

Do they have a BRM Admin role, in addition to the Access Level settings?

[Former Member]

Dear Jocelyn,

We already have BRM admin ume role assigned to the user id.

Regards,

Shamila S