JR64543: DOC - YOU SEE AN AUTHORIZATION ERROR WHEN YOU TO MODIFY SECURITY FOR A PROJECT AREA WHEN DIFFERENT REALM NAMES ARE CONFIGURED

APAR status

• Closed as documentation error.

Error description

• If the realm name defined for Business Automation Workflow is
  different than the realm name configured for Content Platform
  Engine in WebSphere Application Server, you receive an
  authorization error when you try to modify the security on a
  project area.
  
  Error in the application server log for Business Automation
  Workflow:
  WebCollaborat A  SECJ0129E: Authorization failed for user
  <user>:<CPE Realm> while invoking POST on
  default_host:/bpmjaxws2/BPMWSAPISoapService, Authorization
  failed, Not granted any of the required roles: BPMWSAPIUser2
  
  PRODUCTS AFFECTED
  IBM Business Automation Workflow
  

Local fix

• Change the role mapping for "BPMWSAPIUser2" to "All
  Authenticated in Trusted Realms" for the
  IBM_BPM_WebAPI_<clustername> application in WebSphere
  Application Server admin console.
  

Problem summary

• No additional information is available.
  

Problem conclusion

• A documentation update is available or will be available that
  clarifies the additional authentication configuration need when
  Business Automation Workflow and Content Platform Engine realm
  names are different.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels