Problem :: Facing Error while doing offline deployment in IBM BPM PS servers. Error is 'You are not authorized to make changes to items in this context'.
We were doing offline deployment with very well established commands and commands which we use in other environments and working from long time.
Work Around ::
We raised PMR for same and after some investigation IBM team came back with details that there was problem in Database an entry for particular application and authorization.
Table - LSW_ACL_ENTRY
We need to check the entry for our project in this table which we can do by comparing below columns
LSW_ACL_ENTRY -> PO_ID
LSW_PROJECT -> Project_Id
And then check what is the User_id or group_id in the respective column of LSW_ACL_ENTRY. in our case user_id was 1 which means tw_autor user was having access to that processApp.
IBM team was not sure why it was like that as it should be user_id 3 which is tw_admin who should have access to application.
Now, catch is we were using tw_admin credentials to login to wsadmin console before doing deployment. and this user was not having access to application. at same time we cannot do deployment using tw_author as it is not an admin user.
As a workaround , We have added tw_author user in tw_admins group and completed our deployment using tw_author user which worked.
IBM Team is still not sure why this thing happened and they said they will investigate and come back with permanent solution as adding tw_author in tw_admins group is not a good idea.
I will update this post if we find any permanent solution.
We were doing offline deployment with very well established commands and commands which we use in other environments and working from long time.
Work Around ::
We raised PMR for same and after some investigation IBM team came back with details that there was problem in Database an entry for particular application and authorization.
Table - LSW_ACL_ENTRY
We need to check the entry for our project in this table which we can do by comparing below columns
LSW_ACL_ENTRY -> PO_ID
LSW_PROJECT -> Project_Id
And then check what is the User_id or group_id in the respective column of LSW_ACL_ENTRY. in our case user_id was 1 which means tw_autor user was having access to that processApp.
IBM team was not sure why it was like that as it should be user_id 3 which is tw_admin who should have access to application.
Now, catch is we were using tw_admin credentials to login to wsadmin console before doing deployment. and this user was not having access to application. at same time we cannot do deployment using tw_author as it is not an admin user.
As a workaround , We have added tw_author user in tw_admins group and completed our deployment using tw_author user which worked.
IBM Team is still not sure why this thing happened and they said they will investigate and come back with permanent solution as adding tw_author in tw_admins group is not a good idea.
I will update this post if we find any permanent solution.
No comments:
Post a Comment