Tuesday, December 17, 2013

Websphere Commerce Access control problems

Troubleshooting: Missing policy for a new view A new view is missing an access control policy.
Problem: Added a new view without an accompanying policy.
Indication: An application error is displayed. In the trace.log file the SiteAdminCanDoEverything policy is logged, but the user is not a Site Administrator.
WC_ACCESSCONT PolicyManagerlmpl.isAllowed isAllowed? User=123;Action=MyNewView;
Resource=com.ibm.commerce.command.HttpForwardViewCommandlmpl;Owner=-2001;
Resource Ancestor Orgs=-2001,-2001; Resource Applicable Orgs=-2001
WC_ACCESSCONT PolicyManagerlmpl.isAllowed Found PolicyName:
SiteAdministratorsCanDoEverything; PolicyType: 2;PolicyOwner:-2001
WC_ACCESSCONT PolicyManagerlmpl.getPolicyApplicableOrgs Policy Applicable Orgs=-2001
WC_ACCESSCONT PolicyManagerlmpl.evaluatePolicy Evaluating PolicyName:
SiteAdministratorsCanDoEverything
WC_ACCESSCONT d PolicyManagerlmpl.isAllowed PASSED?=false
Solution:
1)Create a policy for the view. Refer to Adding a new view using existing policies .
2)Load the policy using the acpload utility.
3)Update the Registry.
Source URL: http://pic.dhe.ibm.com/infocenter/wchelp/v7r0m0/topic/com.ibm.commerce.developer.doc/refs/raxtroubleshoot.htm Share

No comments:

Post a Comment