Monday, October 12, 2015

IBM BPM Process Center Admin Tab is not visible to tw_admins and getting Authorization error while import


When you log into the process center, if you are in the tw_admins group, and no one as messed with any settings, you are a repository admin. This means that you get a 4th tab at the top of the page called "Admin" where you can control who can login to the Process Center, and if that person also sees this admin tab (as well as other features). By default tw_admins are in this list and have "Admin" checked as a property. Now if someone went and unchecked this for tw_admins, and didn't add anyone else back in.

You can see below issues - Problem Statement

  1. Admin tab is not visible in ProcessCenter Console even for tw_admins
  2. Sometimes get Authorization error while importing applications.
    • Exception:com.lombardisoftware.client.security.AuthorizationDeniedException SourceId:com.ibm.ws.uow.UOWManagerImpl.runUnderNewUOW
  3. The button to add a new offline process server is missing

Cause
If any user account in the "tw_admins" group removes the administrative privilege, the group loses its administrative privilege as well. Thus, every user that belongs to the "tw_admins" group cannot see the "Add a New Offline Server" button under the Servers tab nor access the Admin tab.

Diagnosing the problem

To determine whether administrative privileges are set, complete the following steps:
  1. Open the LSW_ACL_ENTRY table for the ACL of the "tw_admins" group.
  2. Check the row whose "GROUP_ID" is 3, and "ACL_ENTRY_ID" is 1. If the value of "MASK" column is 127, the group "tw_admins" has administrative privilege. Otherwise, the "tw_admins" group does not have any administrative privileges.

Resolving the problem

To resolve this issue, complete the following steps:
  1. Stop the Process Center server.
  2. Review the LSW_ACL_ENTRY table in Business Process Manager database and ensure that the value of the "MASK" column with "GROUP_ID" = 3 and the "ACL_ENTRY_ID" = 1 is 127.
  3. Restart the Process Center server.
  4. Log onto the Process Center console with any user account in the "tw_admins" group.

No comments:

Post a Comment