JR42730: TW_AUTHORS GROUP USERS INTERMITTENTLY FAILING TO LOG IN PROCESS DESIGNER WITH ERROR "DOES NOT HAVE THE REQUIRED ROLE

Version 7.5.1 Fix Pack 1 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• Users that are part of tw_author group and not part of the WAS
  admin role cannot login via ProcessDesigner.
  
  From process center logs we see the following error.
  
  [9/1/11 6:40:11:821 CDT] 0000004b FileRepositor A ADMR0024E:
  User defaultWIMFileBasedRealm/L840044 does not have the required
  role to access 1 document(s).
  [9/1/11 6:40:11:826 CDT] 0000004b WorkSpaceMast E WKSP0012E:
  Exception while extracting cells/cell_rispc_bpm/cell.xml from
  ConfigRepository--com.ibm.websphere.management.exception.Reposit
  oryException: Caller is not in the required role to access
  restricted document(s)
  at
  com.ibm.ws.management.repository.FileRepository.throwRepositoryE
  xception(FileRepository.java:1445)
  at
  com.ibm.ws.management.repository.FileRepository.extract(FileRepo
  sitory.java:1102)
  at
  com.ibm.ws.management.repository.FileRepository.extract(FileRepo
  sitory.java:1057)
  at
  com.ibm.ws.management.repository.FileRepository.extract(FileRepo
  sitory.java:1046)
  at
  com.ibm.ws.management.repository.client.LocalConfigRepositoryCli
  ent.extract(LocalConfigRepositoryClient.java:141)
  at
  com.ibm.ws.sm.workspace.impl.WorkSpaceMasterRepositoryAdapter.ex
  tract(WorkSpaceMasterRepositoryAdapter.java:833)
  at
  com.ibm.ws.sm.workspace.impl.WorkSpaceMasterRepositoryAdapter.ex
  tract(WorkSpaceMasterRepositoryAdapter.java:824)
  at
  com.ibm.ws.sm.workspace.impl.RepositoryContextImpl.extract(Repos
  itoryContextImpl.java:658)
  at
  com.ibm.ws.sm.workspace.impl.RepositoryContextImpl.extractOnly(R
  epositoryContextImpl.java:625)
  at
  com.ibm.ws.sm.workspace.impl.RepositoryContextImpl.extract(Repos
  itoryContextImpl.java:609)
  
  Caused by: com.ibm.wbi.utils.configservice.WBIConfigException:
  No cells found.
  at
  com.ibm.wbi.utils.configservice.WBIConfigServiceHelper.getCell(W
  BIConfigServiceHelper.java:111)
  at
  com.ibm.wbi.utils.configservice.WBIConfigServiceHelper.isStandal
  one(WBIConfigServiceHelper.java:271)
  at
  com.ibm.ws.bpm.repo.services.bootstrap.BootstrapUtil.getBootstra
  pInfo(BootstrapUtil.java:51)
  
  Note: User can login into process designer after restarting
  the cluster member.
  Note: User can login into process designer if the user added
  to WAS admin role.
  

Local fix

• Add user to the WAS admin role as a workaround
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM Business Process Manager v7.5.0.1       *
  ****************************************************************
  * PROBLEM DESCRIPTION: Users that are part of tw_author        *
  *                      group and not part of the WAS           *
  *                      admin role cannot login via             *
  *                      ProcessDesigner.                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  After attempting to log into Process Designer with a user
  that is in the tw_autor group, but not part of the WAS admin
  role, the following error can be seen in the Process Center
  logs.
  [9/1/11 6:40:11:821 CDT] 0000004b FileRepositor A ADMR0024E:
  User defaultWIMFileBasedRealm/L840044 does not have the
  required
  role to access 1 document(s).
  [9/1/11 6:40:11:826 CDT] 0000004b WorkSpaceMast E WKSP0012E:
  Exception while extracting cells/cell_rispc_bpm/cell.xml from
  ConfigRepository--
  com.ibm.websphere.management.exception.Reposit
  oryException: Caller is not in the required role to access
  restricted document(s)
  at
  com.ibm.ws.management.repository.FileRepository.throwRepositoryE
  xception(FileRepository.java:1445)
  at
  com.ibm.ws.management.repository.FileRepository.extract(FileRepo
  sitory.java:1102)
  at
  com.ibm.ws.management.repository.FileRepository.extract(FileRepo
  sitory.java:1057)
  at
  com.ibm.ws.management.repository.FileRepository.extract(FileRepo
  sitory.java:1046)
  at
  com.ibm.ws.management.repository.client.LocalConfigRepositoryCli
  ent.extract(LocalConfigRepositoryClient.java:141)
  at
  com.ibm.ws.sm.workspace.impl.WorkSpaceMasterRepositoryAdapter.ex
  tract(WorkSpaceMasterRepositoryAdapter.java:833)
  at
  com.ibm.ws.sm.workspace.impl.WorkSpaceMasterRepositoryAdapter.ex
  tract(WorkSpaceMasterRepositoryAdapter.java:824)
  at
  com.ibm.ws.sm.workspace.impl.RepositoryContextImpl.extract(Repos
  itoryContextImpl.java:658)
  at
  com.ibm.ws.sm.workspace.impl.RepositoryContextImpl.extractOnly(R
  epositoryContextImpl.java:625)
  at
  com.ibm.ws.sm.workspace.impl.RepositoryContextImpl.extract(Repos
  itoryContextImpl.java:609)
  Caused by: com.ibm.wbi.utils.configservice.WBIConfigException:
  No cells found.
  at
  com.ibm.wbi.utils.configservice.WBIConfigServiceHelper.getCell(W
  BIConfigServiceHelper.java:111)
  at
  com.ibm.wbi.utils.configservice.WBIConfigServiceHelper.isStandal
  one(WBIConfigServiceHelper.java:271)
  at
  com.ibm.ws.bpm.repo.services.bootstrap.BootstrapUtil.getBootstra
  pInfo(BootstrapUtil.java:51)
  Note: User can login into process designer after restarting
  the cluster member.
  Note: User can login into process designer if the user added
  to WAS admin role.
  

Problem conclusion

• The port information used for connecting to the server from
  Process Designer is stored in the server configuration that
  has limited access to only those with the WAS admin role.
  The fix was to change to a system ID with the appropriate
  permissions in order to retrieve the port information.
  
  NOTE: JR41441 Interim fix that was released on 7.5.1 is a
  duplicate of this fix JR42730 which applies on 7.5.0.1.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R750 PSY

     UP